last executing test programs: 9.858350726s ago: executing program 1 (id=1059): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x37) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e00000015c413394c2cd647ccea14a0fa72abaaded37e53e987e722424214f79ed6432be46dbbcbf8bc3039a06c208aa6c7b8658e45d6d0c"], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff7f, 0x0, 0x1, 0x0, 0x0, 0x4040894}, 0x0) 9.81286075s ago: executing program 4 (id=1060): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000007c0)={'bond_slave_0\x00', @multicast}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x1, 0xa}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x9f, 0x7, 0x9, 0x40, 0xd8}, 0x19, &(0x7f0000000440)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "4e5b9dc225a8b5e9bf2f2f28448f544b"}]}, 0x6, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x20db}}, {0x84, &(0x7f00000005c0)=@string={0x84, 0x3, "b7d56b154721f9cee2c04357ac747f5fc6cf4c7f1c5c963112785627b180256ce531cb92621dc41aa88470be3f58b10eba1aacf936efe0de4e5c3a965ff1c0816ee9970f4f7c91ad129e07d57476409795edf8439e735fba4c7829b901cf7bf1f3febcbe3f1c579f4749dba51a0636488e3c10813b90824fc4e61262e822c7d60c22"}}, {0x3d, &(0x7f0000000500)=@string={0x3d, 0x3, "aa202d2105bf0bc67e59422263069cdc0462e8f96e2560a246ff79f0a72b384f27dbdefa177b0b827e7ed96413ba95e2f71b62ad5556615b363448"}}, {0x6c, &(0x7f0000000680)=@string={0x6c, 0x3, "7b12885f90d20bb22a7e1d1dfc52830cb8674b87cd9c094479b485f7e7ac51c16772bfcdc9140a4c3e7ee54cd0e9780ffc0e9f8f2e6da2ffd88bc74c5f65c436e577a3ab920f2392f5b557695f25acd6aa74a835c794a6144bfe9e12df879658eaa39225bb6287804a29"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42d}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000, 0x7, &(0x7f0000000140)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) close(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x5}, {0x0, 0xd}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r9, 0x29, 0x16, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="40174640000052267e5202df"], 0x0, 0x0, 0x0, 0x0}) 7.536263064s ago: executing program 2 (id=1066): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg(r0, &(0x7f0000007100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) close_range(r3, 0xffffffffffffffff, 0x0) unshare(0x22020400) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) ioctl$TCGETS(r5, 0x5401, &(0x7f00000001c0)) unshare(0x22020400) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="b78e2bc86c9db47ae8e059", 0xb}, {&(0x7f0000000080)="bcc9b1557de1fed1f955144629ed4dcfda58d1b606fa77a7658dcf3c33679ea22502e3cff80000f5d43921bc111a262f295a8eb540", 0x35}, {&(0x7f0000001680)="094fb143d2a9baa36aaa2cca06886c533118e056", 0x14}, {&(0x7f0000000100)="686c7d74fb56e5e31d06a975d1cca1fdf78ef7944112cc30382d9d00"/38, 0x26}, {&(0x7f0000000140)="fda1d84914b4a657f3f53ac240d5667fcd6717f6aaf111f4334d824ff212c4cb75574d767693ad79a8676d", 0x2b}, {&(0x7f0000000200)="88ef6722bc2c7b01548114b40ae4caf8ce72fb9f9845cc8834897e249ea35c6bae9acc6e595b4a9c7b7bf783ebfdbc2c82d27cd63860b4becf734c98", 0x3c}], 0x2}, 0x44040) 7.056727423s ago: executing program 1 (id=1068): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync_file_range(r5, 0x7fff, 0x5, 0xf) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.958456286s ago: executing program 3 (id=1069): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000040) 6.661253714s ago: executing program 3 (id=1070): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync_file_range(r5, 0x7fff, 0x5, 0xf) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.363293999s ago: executing program 4 (id=1071): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000800", [0x0, 0x2000000000001]}}) 5.545884275s ago: executing program 2 (id=1073): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0xa, 0x1, 0x2, 0x0, 0x1}, 0x50) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000080)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0xa, 0x1, 0x2, 0x0, 0x1}, 0x50) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) (async) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000080)) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) 5.176177684s ago: executing program 2 (id=1075): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x20b, 0x0, 0x0, 0x20, 0x3, 0x3, 0x5, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x400, 0x8000000000000011, 0x4, 0x100000, 0x3], 0x1, 0x3c4210}) syz_emit_ethernet(0x1f, &(0x7f0000000200)=ANY=[@ANYBLOB="19e0ffffffff006c000000000011424203", @ANYRES16=0x0, @ANYRES32], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {0x10}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4440}, 0x4000000) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@code={0xa, 0x77, {"400fc39b26e4000066ba2100b000ee66baf80cb8b38f098aef66bafc0cecb9230200000f3266ba410066b8000066efb90d0a0000b84b100000ba000000000f3066baa00066ed67f3430fc774059ec744240001000000c7442402f68f0000ff2c246467670f09"}}], 0x77}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000010a6c310c6050d9223e5010203010902240001010000000904000202ff18ecff090503e5100000fa00090582"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044040) io_setup(0x8, &(0x7f0000000540)=0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r8, &(0x7f0000000080)="01fd", 0x2, 0x2a25}]) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r9, 0x0) io_setup(0xc00, &(0x7f0000000000)=0x0) io_submit(r10, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000001, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0xfffffffffffffffd, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a9000}) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x1000, 0xffffffffffffffff, 0x3, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffc}, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r11, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.040322833s ago: executing program 4 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x8, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x9, 0x1b00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r1}}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000007d0000004300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r3}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r3, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c000000120010022abd7000fbdbdf2518030204000500050600000002000000ffffffff050000007e00000006000000070000000b000000", @ANYRES32=r2, @ANYBLOB="0700000009000000a300000000000080fef23081a6285dd8f10e1c1f579bfc492153999a420a46a0e7bacd2a58fcd9afe43fbbdd0314f02cc6f96cd952c44c00f64e7123d626619a0b7fb079457cac1bd53d6e959357cd4a0c631249868db133c14587e3fa8790f9390ecf0fce9f144372e1f58ae60245880c00a50a1bd62d643cc623a0c80d1dafbfae2911b597a4e1dd8105e56fe1cdf834ea570a0fea63e27c1c2a09929390e388217768ef2e390db7f0074eecf7e18b56ed4b4bfb44cdfb0e69e0dbbb1bb7f7d0f7ccd21299abfbd08e5025acc38f0461a676b8c4d466bb3fc914d81d5de5a0332e57cdeaf8382dce"], 0x4c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x1) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db90100000000c54222cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@mcast2}}]}, 0x16c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000ac0)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x200088d0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000380)={{0x12, 0x1, 0x240, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x39, 0xf0, 0x4}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x45, 0x72, 0x4c, 0x40, 0x4}, 0x94, &(0x7f0000000440)={0x5, 0xf, 0x94, 0x2, [@ss_cap={0xffffffffffffffad, 0x10, 0x3, 0x2, 0x9, 0x8, 0x7, 0x5}, @generic={0x85, 0x10, 0xa, "d0fbbdcb7f42e5de73c45f0bf5734d5f95b94326af4b4bfbae2c45ef9346e116459e3cb5f389015da6ef1125930c2e1be04d0a4911a40997f64a7ac1a8d326371c921a94939bba57006eb7bb6a9a4ea5b5fb0115e3fe13078c93932e1a423b9a2322383f853c79adc0e114e22442a1f7a714287ea10a8d54a58dcc563afc4d865462"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x444}}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2807}}]}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000009c0)) 4.986599426s ago: executing program 3 (id=1077): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000a2d000/0x2000)=nil, 0x2000, 0x16) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket(0x2b, 0x1, 0x1) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x98, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3c35}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="840000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d30000000000000480016804400018040000c8014000104ff0300ff88a8000014000100390e00003f0000000d000000810000001400010006000000af0600000700000088a8000005001100060000000000000000000000337289ae8504346600e663960b2466b8aeb6d543ca7b0ab342095dd8aa80a9436ac2f322cd6bb964e3248157af44c58b53fb284ad18ee521b78b0b06ef2dad6158b7e9a5a099c23ff2e5a4f76b865a82818641f06dd6e5a447eed69dd0eb0c356e744afe52ad9e3f7a4ee55afa2316f56ff79b8928a92f1afe8c6d0077f0960092ad769d4294fff153"], 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 4.766626808s ago: executing program 1 (id=1078): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x37) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e00000015c413394c2cd647ccea14a0fa72abaaded37e53e987e722424214f79ed6432be46dbbcbf8bc3039a06c208aa6c7b8658e45d6d0c"], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff7f, 0x0, 0x1, 0x0, 0x0, 0x4040894}, 0x0) 4.413970522s ago: executing program 4 (id=1079): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000100)=0xfff, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000400)=""/210, 0xd2, 0x10, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x1f, 0x56, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000022c0)=0x0) sendmmsg$sock(r0, &(0x7f0000004840)=[{{&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="8fbf351c26501b3c3a16801ed2472d65b9b9c35508ad4b18f36f622b95ec6830650f05c2d5b59cd3b50dca8019dbd324415a6ae28fc89c57241858ce534b64388ad1ee6d34ea35dacc8d947f86caa2e5695fa70aa0686ccaf911adeabac9324cdd2f64432e755fe194b8c4e00d13b8826646744be5d94cd50a7099d7fb952645e8d51c81d2d7709e17f464", 0x8b}], 0x1, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0xda1e}}, @mark={{0x14, 0x1, 0x24, 0x2900000}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}}, {{&(0x7f0000000580)=@xdp={0x2c, 0x1, r6, 0x7}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)="ba41277e29240141d890038cb1b6730ad3aae9791d4504c931cd4ee5e83b0ac458c091597266e75dafac91c16b8ec92a91892942df34d7f27c353be119c39b4bea56033cfd26863b9b4903777ed42da6422ea25903bc132390a0693eb952915cf0d539bf707acbdfcb0efcbab142f970bcd39fc29adbcd7017c370b661249dafe0a858753075616d41c91595c1af650199b354b4ab146b82d685b6403556d607bd6bc8f2e1f81755e3c9459709f917b057adc77a030227d71792d047351d9d3ae25d6893d3cfb33f1e003db20706301bb6132ba1a22d2b12ce0b2cda95bb489e53100f86230d89b840a714c97d611a6377", 0xf1}, {&(0x7f0000000700)="07d73df9012acee8b9a66f9031c9106928a92f1fe01ec906a7dd5b2a447c8997befdde5b17ac750a53f4bb58a44dce7d0f5bc120da9a45d543a182446f4a894468470d723cfa9e634f6bfd5291e602d5d059bf40494f9c5c5d06a6f28b9ec3879fb1661edec665c9a8339be4b052b146a4cefc76ad0a7514f91f1518a7202f353691a1397253177ae243800088449b12a7c5cae52d1937a93afcb98bad8734e835659188", 0xa4}, {&(0x7f0000000300)="50ac41ce38", 0x5}], 0x3}}, {{&(0x7f0000000800)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x2, 0x2}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000880)="7a308b2bd108d46de5b79fb4e9f55f8eecf0864696f264c23de82a54da09409b85b7e659f994004a37cc7b3bd526ec42a60267865decb68750b82e9f88a982414127762f7283eb7b2323d24dffd858527d6b26570ff83f442b01f750bde0fb0c4fe3f138310dec7ea820a8b64bee173d6c7ec4381fa015c63eb769d153374af57a7a4e544fe2a1d547a4538575ae8a9c8afb57857ac617be346b4eb40a23233ef76033b21cecaba1f33eafe252177f1c3d6e8e99ccce8ca8982e43fbf05e5004e46ed83879a19b1eee50e504148308ac6d128a", 0xd3}, {&(0x7f0000000980)="467eb7461a68fb506dd548a4e1b0c4320fbba12dd1c1d38424d9e71167eb201cc98193fa14986057fb42f473422ce50ca9cdc585fb073a4e3e9e4436032aed6ce3a2defc7b0f6a4b19fd3dcd99debcc667c6307eb13fea9bb9a69d1f6a3a0da4a86bcd0e52317c0a7cc34a636e30793ee4cedc3482743691a299f1", 0x7b}, {&(0x7f0000000a00)="aa768513523bb5a39535f6f58d5fc98eebe3c7f2844a023503c4e72b2706f61cd9d33a1790772cd491e0aa5fdcc08ed3bf42ad9e7f7e5f7e9bd1986558", 0x3d}, {&(0x7f0000000a40)="f856badecf48cf226d2e54fa2dbcc567efa26f47de158a17bbb1017e683cdcbd49daea8afc0aea25eda60b3b74e2bb5c16db2a4dc873c889d13300d24853b9627ce2e8a9902a4b846764ef06fefff88c8656d506bf0096b6c5595713c7d343a53863e375da80f3378a7cb7", 0x6b}], 0x4, &(0x7f0000000b00)=[@mark={{0x14, 0x1, 0x24, 0x71}}], 0x18}}, {{&(0x7f0000000b40)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="811c91bf9fcc7a9e3d9531ad870b15b2b9a547", 0x13}, {&(0x7f0000000c00)="54cdc7f12cf94eeedbb78f96dd87dfe6e583487c1412dffc30f0da2ca2ff303d8a0a5e7b249fbbe7b41f70dc651dc97dc4a6457ee46acaf2ef9f98f4c4e3e613a65f8150a604daae9fdd3e445f6de30d5fefb0da1e72e40bb202fa7d2350624347ebc075cafe56ad1de7271d13d98ccf21ddeee4d2dd01a196cffbc580d2655414d5602ee79b48d56648f8b6bd516159740dcb355893aaa4c0351404e478b9391bdbfd2ba2680532441cc01b287a4d97a709441db72f4de4afc032f2017902558573529e1509720db5a0dae8974f74fb855f92e304d6b48a63464f0a99f52f4d3130e7be6c84f43b3cf5e8", 0xeb}], 0x2, &(0x7f0000000d40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x90}}, {{&(0x7f0000000e00)=@ll={0x11, 0x8, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000e80)}, {&(0x7f0000000ec0)="6dd3b0156550b6e56be805116e1635bc881a32885c701cf869d7757f627795cf53fde9c5fab7152b9597c4d79eab", 0x2e}, {&(0x7f0000000f00)="d2142e2ec93d1414011b65c3a6ba96bd21d6bc825699b66f505a9379f0c41f1ef0b5e827bfb7624ec44d481002f970f8cfa837807868820d4c685764add1821c7994e4529772ec5e9cf61a5003567406fe6b2bd6c07b1ae14ea797dead259c91e4", 0x61}, {&(0x7f0000000f80)="65dcec659894162c31aeceec4ac00c1149582952001ab2f0d9e7051a2eb003066271d90ac82cf239868f58f8d74e7a82612fd4db6421c1f9a609ec74460616e02a7499fff2677a1d2f305b2174757c5f7439fe2f93e636d93c79586efb659e24a08defbad54d5c6502a0e1234ae8278f64506cfbcc152bfe1e0fd303d1cd4adad47d5e8875c60e6767bcd7e54baa1cb81466f46734c919e198924adb476c0297b5e70a521e49ca38e0c4a03b6200e190ffafa1371942c76832b11e662ca1623e80aa2e1e92e6a9cf290ee0d61d0b02f84d41846590b8f0b080b1f113393b62430a709b423aef02b61578ee87cf87ad65be2820450b43", 0xf6}, {&(0x7f0000001080)="28f4cf6dc2b36feb988ac5a1720699e1d3eb0b1bf40117ff631f0f90d08c3ef940af906c7638598242282ad1cc37872b9fe598e7964109aa3b397f16e81aec337fd2774191dedd1d", 0x48}, {&(0x7f0000001100)="a04549affa3ba0525d97b659392de65be19d459a4eb49b553d455526a17a816f2dfce6b88630c0d8d658a2f9a3a3b8a01497ffde3113df643c0645d2ffee21e3b2d839bd39c23d84733e298cda4b3a69941a48371130bcfc1427d51df66e83a76da20ed64fef22ace3f1de7f914fcccd0f07aa186144e4a6f2a43adca7ddeb0b634ee07079611ef1164207b2f465151624a355bf04e596fa09a568731545ab5bda101b68455005effcfe361a5935063306128eae0d13dac09bfdb676a3d23d2261710747bedfe616a629440908a108da2035ebf75d01f2dcc1031bc1ce62b1e35dd8", 0xe2}, {&(0x7f0000001200)="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", 0x1000}], 0x7, &(0x7f0000002280)=[@txtime={{0x18, 0x1, 0x3d, 0x7463b021}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x30}}, {{&(0x7f0000002300)=@nfc_llcp={0x27, r10, 0x1, 0x6, 0xde, 0x4, "4bbbec53d504b9a7c8be899af967d7946366654d02ab5fe89bf2d05184c8be49511eb5dc9264e8ea7e42dc3ecec5639a8e376ada207d1df53400e0c55ee6bf", 0x14}, 0x80, &(0x7f0000004740)=[{&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="71a3d7297c4d7fe2163183832873516747050b5e9873ac45dc29cb62b56e999588f2ea68e873b9868a44c4978051c182249bd08457b856ebc30105c56bedd66e15658aa40e4a652fc8de55f5639bea7cf55b901af2b2d34daca57a9a76f69bbe5b3ba495e99ddd2d6d88bc79531aa6c1993916babfdee2b2b25a8c3a748f3f92f70d771ba103adecbe39a310dee5704d7b67731f24f014ec0df37c5d59e3302033b11eca74b8b87d5d512b6a6dffbce0a28eeada242c4a47563521cb349bd6af1280ec05fae782629f7cdd96f881e6dcc06e3df986ca0d88f18dcddd33a817", 0xdf}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000004480)="5ae4eabb821f1036d46ca795b6dbf7d5d3df50e919a4c487539812", 0x1b}, {&(0x7f00000044c0)="691c0ab0610f1dd00b6c74323442d51f0918d5545bf8f1bfd6569a23b52ff0bc15938ca96db715434986a9b5c96daf58d882d56388e4dbb15a1792c630c3bc2614583ef75601b9ef7347497fe740a9e5d7f42dfa1cc7f69e868bbbe7af7d0badba4c2b4963575af20f3fa9821d1028c60e12e3af16cf1cb33b169ed4698ab27968ef244708ec81bcdd555e", 0x8b}, {&(0x7f0000004580)}, {&(0x7f00000045c0)="9bcc897872d20c61bfc025d9b1832703b5473a728bbf4c3d7be7685ba6eb5cd98f691c9fbf61e644130e5b06542d355cf62ebcded943b7c0b5634afa5ec270734293337b29aa02325f42338fbf5c0f27a3c53558c5e6065179abeeb67946be69e5cfd348a398563a7baf7f76d6579ce4479bed221b96bf4081ac99329a5d0723f5323dd6409c81", 0x87}, {&(0x7f0000004680)="3a485db9d8663cfe5556014df5e1b47474005e1da86ed4f1d05a0ccbf78293675170cd1b41b3e7ce01957de96d2fad71b2eecd0e9dde269ab8842380b5aa1bb8585c95d35228e3bc0146bcb2273bb8e0d077d107ae6d754525f39f304fce33679e49cf14717ccb4ef1e2146f2fcfc7a67ba5966e1155c093316caeb9988f0ac2bcf36dea312ca12576e4270f789a44c1075f255db2e3", 0x96}], 0x8, &(0x7f00000047c0)=[@timestamping={{0x14, 0x1, 0x25, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x3f}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x48}}], 0x6, 0x20000045) 2.544690562s ago: executing program 0 (id=1080): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000040) 2.395407379s ago: executing program 0 (id=1081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x8040480) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7}) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) bind$inet(r6, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x11}, {0xffe6, 0xd}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@private0, @multicast1, 0x1a, 0x18}}) r9 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000200)={0x800034f8, 0x2, 0x0, 0xb, 0x17, "f09b520bf0cc8286a2766eb2d53dcd52352176"}) close_range(r9, 0xffffffffffffffff, 0x0) 2.330652841s ago: executing program 4 (id=1082): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de0e0203010902f3c8010000000009040000000206"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x345}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="200804"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000200)="240000005800413bf417a2f90085b3a85c91fddf080001000501009f080001000000000056", 0x25) 2.075448077s ago: executing program 2 (id=1083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000600", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.062034179s ago: executing program 0 (id=1084): r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x1000, 0x2, 0x116}) close_range(r0, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r4, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000000)="b90903de3c6027c8e40355bc9f96cc1053", 0xffffffffffffffd9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r4, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000000c0)={@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001280)={0x3, 0x0, &(0x7f0000001200)=[{&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000000200)=""/4096, 0x1000}], &(0x7f0000001240)=[0x6, 0x7206, 0x10000, 0xe91, 0x80], 0x4}, 0x20) 1.610146643s ago: executing program 2 (id=1085): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r5, 0x11}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r5, 0x1}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r5, 0x5}) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r6 = dup3(r1, r0, 0x0) fchdir(r6) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1.607205594s ago: executing program 3 (id=1086): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000900", [0x0, 0x2000000000001]}}) 1.478729569s ago: executing program 1 (id=1087): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x0, 0x8, 0xc, 0x6106}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x24002, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) r3 = io_uring_setup(0x6ae4, &(0x7f0000000140)={0x0, 0xdd51, 0x1c3b0e1b8fcd83ad, 0x0, 0x1, 0x0, r2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f00000001c0)="068b55677d06fb9c380aaf534a8c38a41c81fae3cf74e0ab778243ff1f3b3169585ecb0e393b99bdfa") ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000200)=0x5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x9, 0x8, 0x34, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, @mcast1, 0x20, 0x8, 0x9, 0x10001}}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)=@allocspi={0x3b8, 0x16, 0x100, 0x70bd26, 0x25dfdbfc, {{{@in6=@loopback, @in=@multicast2, 0x4e22, 0x2, 0x4e22, 0xcb, 0x2, 0x80, 0xa0, 0x6, r5, r6}, {@in6=@empty, 0x4d6, 0x33}, @in6=@empty, {0x4a1, 0xf, 0x0, 0x7b, 0x9, 0x1, 0x7, 0xfffffffffffffff9}, {0x8000000000000001, 0x3, 0x34b7bb7c, 0x8000000000000000}, {0xfffffffd, 0x2, 0x3}, 0x70bd27, 0x3506, 0xa, 0x2, 0x3, 0x4}, 0x2, 0x6}, [@tmpl={0x184, 0x5, [{{@in6=@local, 0x4d2, 0x3c}, 0x8, @in6=@mcast1, 0x34ff, 0x0, 0x1, 0x9, 0x7, 0x8001, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x3c}, 0x2, @in=@broadcast, 0x3501, 0x2, 0x1, 0x5, 0x8, 0x0, 0xfffffffc}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x4, 0x0, 0x6, 0x5a2d, 0x18, 0x1c}, {{@in6=@mcast2, 0x4d4, 0x32}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x3, 0x1, 0x9, 0x7f, 0x37}, {{@in6=@mcast2, 0x4d4, 0xff}, 0xa, @in6=@loopback, 0x3505, 0x4, 0x0, 0x7, 0xa, 0x9, 0xff}, {{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x1, 0x2, 0x2, 0x3, 0x72c9, 0x6}]}, @algo_crypt={0xf0, 0x2, {{'ecb-serpent-avx2\x00'}, 0x540, "c694131101ad242e88149d7cb52380357783c41e5ea07487e7c771ab5d425132df4a6350a59703ed910ef37864adca1ade1a9873a940d7938169f94b521226fe600c59992d1d375377d27e31efe8d615319b94e7327423c31428c9b079bf918605800ea2c24571284a10adba2a01818712bfd597823274435d9b52aac4f4217756dd96a06457c23b703b2bc2d0df7d8313b5f642ca308ca0c699a824bd7fd069b34b9c991f684b4d"}}, @policy_type={0xa, 0x10, {0x1}}, @encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x32}}}, @replay_thresh={0x8, 0xb, 0xa6}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e20, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000880)={{{0xa}}, 0xa, 0x8, &(0x7f0000000840)="924d3630f207b741451d"}) splice(0xffffffffffffffff, &(0x7f00000008c0)=0x8f29, r4, &(0x7f0000000900)=0x1, 0xb4, 0x2) r8 = syz_clone(0x1001080, &(0x7f0000000940)="a4019d6ae98ad83c04aca0800543f79ce57e81ec9e15de694b630a898b9ad782c14652b46f2265556c31c7173eb59c470a77364900a70e2813b14fab85f1e61fc75598da659fcfa0201adad87a9279bb17a6c2fd313bc92b2170cd0ad9d88454340e5695acdf", 0x66, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)="66897816eac8768e2738dafd3374061f16072f5e7a1074f712d756a42d5d98afce878510d58b8ad40fc160ae2d0710a5e30b260f221c1153c6715a9e2f6efc0d21175b9944fc348e93fff1a3f6cfd0dc08a82337b646d3f40a46389750c7dbc7fef79f9fb52c613c5617f46cfeb9") sched_getattr(r8, &(0x7f0000000ac0)={0x38}, 0x38, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000b00)=[@in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfff}, @in6={0xa, 0x4e21, 0x2, @empty, 0xfffff314}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}], 0x80) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x80, &(0x7f0000000b80)=0x4, 0x0, 0x4) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000bc0)=0x2) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000c00)={0x7f, "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"}) getpgid(r8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2800000, 0x810, r0, 0x3915d000) lstat(&(0x7f0000000e40)='./file1\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000f00)={{{@in=@multicast1, @in6=@mcast2, 0x4e22, 0xff19, 0x4e20, 0x4, 0xa, 0x80, 0xa0, 0x67, r5, r10}, {0x7f, 0x4, 0x64, 0x8ec, 0x80000000, 0x0, 0x85b, 0x1}, {0xffffffffffff30c8, 0x4, 0x2, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x4d4, 0x32}, 0x2, @in=@broadcast, 0x3504, 0x2, 0x3, 0x1, 0xcd, 0x6, 0x3}}, 0xe8) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000001000)='silent\x00', 0x0, 0x0) r11 = creat(&(0x7f0000001040)='./file0\x00', 0x44) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe, 0x110, r11, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001080)='system.posix_acl_default\x00', &(0x7f0000001340)={{}, {0x1, 0x7}, [{}, {0x2, 0x5, r10}, {0x2, 0x5, r10}, {0x2, 0x2, r10}], {0x4, 0x1}, [{0x8, 0x7, r7}, {0x8, 0x6}, {0x8, 0x2}], {0x10, 0x4}, {0x20, 0x7}}, 0x5c, 0x1) 1.300711808s ago: executing program 1 (id=1088): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcd, &(0x7f0000000680)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r2 = socket(0x10, 0x803, 0xfffffffc) sendmsg$nl_generic(r0, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000300001002abd7000fcdbdf2511000000f3002e800c0093006e6c3830323131000b00b1002a5e2a5b2b23000008000000", @ANYRES32=0x0, @ANYBLOB="0800110000000000815689f845446cf6d45e5dc6e9392f66e7439486cccd786c44d9941a61fecdb6d0c24c537f9ea21e07701ee6ef7790319f7acb9100160021ecd310ea70bfeb60ed35cee3ea22ba4009b2ec48e526c30d1220721e9b8ae05b9bb031abd937e40f99fa605a58e388c01e0ba44ac7cc047ebf1fa90a17dba6501630f8ddc60c7b54354d72a080c8505133328ee52a4baba3ba6909e46e311722028389b15c3d7e844ddd2f8f6d30e6855b345c416a58e6bead4e49f263624d6d8a944f0fa6d324448267967d00000000"], 0x108}, 0x1, 0x0, 0x0, 0x200440c1}, 0xab8731ce46c32c8e) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64=r1], 0x1c}}, 0x20040000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket(0x10, 0x3, 0x9) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x40882, &(0x7f0000000980)=ANY=[]) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x1f, 0xa, 0x42418, 0x2, 0xffff, 0x0, 0x7dfb, 0x0, 0x0, 0x10, 0x88}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000364800000000000000000000000000000000000000000000000000000000004000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x7fb, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4048aecb, &(0x7f0000000780)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x602602, 0x0) dup(r11) 1.300456421s ago: executing program 3 (id=1089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff230c}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) close_range(r0, r1, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r10, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c1059098e3b3bb9c68149e904"}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x80) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 1.210774151s ago: executing program 2 (id=1090): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x37) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e00000015c413394c2cd647ccea14a0fa72abaaded37e53e987e722424214f79ed6432be46dbbcbf8bc3039a06c208aa6c7b8658e45d6d0c"], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff7f, 0x0, 0x1, 0x0, 0x0, 0x4040894}, 0x0) 1.125264073s ago: executing program 0 (id=1091): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000040) 1.091748949s ago: executing program 3 (id=1092): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r5, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x480c4) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r8}) socket$kcm(0x29, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r10, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) 1.023789582s ago: executing program 1 (id=1093): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c03000000000000000000000000230000000000", @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r0, 0x0, 0x200040c0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x5, 0x7}) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x9, 0x7, 0x2}) r9 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) lsetxattr$security_capability(&(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) 1.02333312s ago: executing program 0 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000002880)) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=',,\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) fstatfs(r0, &(0x7f0000000100)=""/182) 662.770867ms ago: executing program 0 (id=1095): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1096): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0xc0, 0x40, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x3, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): bInterval 0, changing to 7 [ 261.264293][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.277906][ T8501] syz.1.716 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 261.289402][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 261.400381][ T5885] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 261.421183][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 261.435012][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 261.441533][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.458809][ T5885] usb 1-1: no configurations [ 261.463792][ T5885] usb 1-1: can't read configurations, error -22 [ 261.476402][ T10] usb 5-1: config 0 descriptor?? [ 261.614878][ T5885] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 261.635384][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 261.642679][ T5885] usb 1-1: no configurations [ 261.649557][ T5885] usb 1-1: can't read configurations, error -22 [ 261.663267][ T5885] usb usb1-port1: unable to enumerate USB device [ 262.236710][ T8497] netlink: 'syz.4.715': attribute type 10 has an invalid length. [ 262.245659][ T8490] fuse: Bad value for 'fd' [ 262.247140][ T8497] bond0: (slave wlan1): Opening slave failed [ 262.295340][ T5908] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 262.449356][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 262.458002][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 262.476813][ T5908] usb 4-1: USB disconnect, device number 39 [ 262.560024][ T10] usb 5-1: USB disconnect, device number 36 [ 262.722343][ T29] gspca_main: pac7311-2.14.0 probing 093a:260e [ 262.741241][ T29] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 262.754268][ T29] pac7311 3-1:2.200: probe with driver pac7311 failed with error -71 [ 262.776597][ T29] usb 3-1: USB disconnect, device number 38 [ 263.163903][ T8513] sg_write: data in/out 455644/242 bytes for SCSI command 0x0-- guessing data in; [ 263.163903][ T8513] program syz.0.719 not setting count and/or reply_len properly [ 263.232885][ T8515] loop5: detected capacity change from 0 to 7 [ 263.275657][ T8515] loop5: [ 263.278685][ T8515] loop5: partition table partially beyond EOD, truncated [ 263.504146][ T5908] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 263.563551][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 263.617465][ T8529] loop2: detected capacity change from 0 to 7 [ 263.645312][ T8529] loop2: [ 263.655922][ T8529] loop2: partition table partially beyond EOD, truncated [ 263.663541][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 263.681520][ T5908] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 263.713552][ T5908] usb 4-1: config 254 has no interface number 0 [ 263.724226][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 263.735499][ T5908] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 263.747761][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.773967][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.785475][ T5908] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 263.808005][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.823763][ T5908] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.835296][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 263.844669][ T5908] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 263.855065][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.863652][ T5908] usb 4-1: config 254 interface 235 has no altsetting 0 [ 263.884499][ T10] usb 5-1: config 0 descriptor?? [ 263.890141][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 263.899890][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.912245][ T5908] usb 4-1: Product: syz [ 263.916598][ T5908] usb 4-1: Manufacturer: syz [ 263.921429][ T5908] usb 4-1: SerialNumber: syz [ 263.937273][ T8517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.939295][ T29] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 264.106660][ T29] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 264.118487][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.130231][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.140734][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 264.160051][ T8517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 264.162029][ T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 264.169241][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 264.179233][ T29] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 264.194377][ T29] usb 1-1: Manufacturer: syz [ 264.200841][ T5908] usbtest 4-1:254.235: Linux gadget zero [ 264.208616][ T29] usb 1-1: config 0 descriptor?? [ 264.209090][ T5908] usbtest 4-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 264.326809][ T10] hid-generic 0003:045E:FC40.000B: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.4-1/input0 [ 264.383525][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 264.389580][ T9] usb 3-1: no configurations [ 264.394751][ T9] usb 3-1: can't read configurations, error -22 [ 264.423317][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 264.441245][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 264.453356][ T29] usb 1-1: USB disconnect, device number 45 [ 264.456870][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.468260][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.470075][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.499597][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.523231][ T5908] usb 5-1: USB disconnect, device number 37 [ 264.543911][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 264.589395][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.602627][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.678662][ T63] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.704133][ T63] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.711303][ T5885] usb 4-1: USB disconnect, device number 40 [ 264.713159][ T63] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.719291][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 264.728771][ T9] usb 3-1: no configurations [ 264.728793][ T9] usb 3-1: can't read configurations, error -22 [ 264.729217][ T9] usb usb3-port1: attempt power cycle [ 264.765586][ T63] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.083626][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 265.118403][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 265.151677][ T9] usb 3-1: no configurations [ 265.161768][ T9] usb 3-1: can't read configurations, error -22 [ 265.325422][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 265.334408][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 265.374940][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 265.376243][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 265.416576][ T9] usb 3-1: no configurations [ 265.434432][ T9] usb 3-1: can't read configurations, error -22 [ 265.442433][ T9] usb usb3-port1: unable to enumerate USB device [ 265.463098][ T8554] Cannot find add_set index 1 as target [ 265.469034][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 266.290862][ T8576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.713526][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 267.900180][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 267.931198][ T10] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 267.974053][ T10] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 268.070410][ T10] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.121303][ T10] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 268.187523][ T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 268.211762][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.254015][ T10] usb 3-1: Product: syz [ 268.283010][ T10] usb 3-1: Manufacturer: syz [ 268.311993][ T10] usb 3-1: SerialNumber: syz [ 268.375952][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 268.505490][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input16 [ 268.587225][ T10] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 268.617818][ T10] (id 0x00) [ 268.815623][ T10] rc_core: IR keymap rc-imon-pad not found [ 268.821863][ T10] Registered IR keymap rc-empty [ 268.842850][ T10] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 268.887944][ T10] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 269.104227][ T10] imon:send_packet: packet tx failed (-71) [ 269.120494][ T8609] fuse: Bad value for 'rootmode' [ 269.155312][ T10] imon 3-1:155.0: remote input dev register failed [ 269.171020][ T10] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 269.187215][ T8613] syzkaller0: entered promiscuous mode [ 269.231058][ T8613] syzkaller0: entered allmulticast mode [ 269.268164][ T10] imon 3-1:155.0: unable to initialize intf0, err 0 [ 269.319853][ T10] imon:imon_probe: failed to initialize context! [ 269.336653][ T10] imon 3-1:155.0: unable to register, err -19 [ 269.356296][ T10] usb 3-1: USB disconnect, device number 43 [ 270.064297][ T5928] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 270.237817][ T5928] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 270.245542][ T5928] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 270.275258][ T5928] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.311408][ T5928] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 270.324118][ T5923] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 270.385431][ T5928] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 270.422557][ T5928] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 270.430724][ T5928] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 270.474276][ T5928] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.504055][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 270.514242][ T5928] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 270.535252][ T5923] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 270.550354][ T5923] usb 3-1: can't read configurations, error -61 [ 270.556987][ T5928] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 270.582019][ T5928] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 270.590196][ T5928] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 270.631930][ T5928] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.664054][ T5928] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 270.695097][ T5928] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 270.714051][ T5923] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 270.746332][ T5928] usb 1-1: string descriptor 0 read error: -22 [ 270.762877][ T5928] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 270.783959][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.822868][ T5928] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 270.894302][ T8633] netlink: 112 bytes leftover after parsing attributes in process `syz.3.752'. [ 270.904115][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 270.926371][ T5923] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 270.945174][ T5923] usb 3-1: can't read configurations, error -61 [ 270.952430][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.752'. [ 270.964415][ T5923] usb usb3-port1: attempt power cycle [ 271.078417][ T8635] fuse: Unknown parameter 'g' [ 271.304000][ T5923] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 271.336233][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 271.357653][ T5923] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 271.379447][ T5923] usb 3-1: can't read configurations, error -61 [ 271.534172][ T5923] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 271.555133][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 271.572765][ T5923] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 271.592647][ T5923] usb 3-1: can't read configurations, error -61 [ 271.603170][ T5923] usb usb3-port1: unable to enumerate USB device [ 272.026539][ T10] usb 1-1: USB disconnect, device number 46 [ 272.703876][ T8640] loop2: detected capacity change from 0 to 7 [ 272.724372][ T8640] Dev loop2: unable to read RDB block 7 [ 272.730034][ T8640] loop2: unable to read partition table [ 272.738290][ T8640] loop2: partition table beyond EOD, truncated [ 272.757137][ T8640] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 272.808617][ T8638] FAULT_INJECTION: forcing a failure. [ 272.808617][ T8638] name failslab, interval 1, probability 0, space 0, times 0 [ 272.829109][ T8638] CPU: 1 UID: 0 PID: 8638 Comm: syz.3.754 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.829144][ T8638] Tainted: [L]=SOFTLOCKUP [ 272.829152][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.829165][ T8638] Call Trace: [ 272.829173][ T8638] [ 272.829182][ T8638] dump_stack_lvl+0xe8/0x150 [ 272.829219][ T8638] should_fail_ex+0x412/0x560 [ 272.829257][ T8638] should_failslab+0xa8/0x100 [ 272.829287][ T8638] __kmalloc_noprof+0xe8/0x760 [ 272.829311][ T8638] ? tomoyo_encode+0x28b/0x550 [ 272.829349][ T8638] tomoyo_encode+0x28b/0x550 [ 272.829387][ T8638] tomoyo_realpath_from_path+0x58d/0x5d0 [ 272.829432][ T8638] ? tomoyo_path_number_perm+0x219/0x630 [ 272.829472][ T8638] tomoyo_path_number_perm+0x246/0x630 [ 272.829504][ T8638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 272.829536][ T8638] ? __lock_acquire+0x6b5/0x2cf0 [ 272.829576][ T8638] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 272.829624][ T8638] ? __fget_files+0x2a/0x420 [ 272.829661][ T8638] ? __fget_files+0x2a/0x420 [ 272.829691][ T8638] ? __fget_files+0x3a0/0x420 [ 272.829721][ T8638] ? __fget_files+0x2a/0x420 [ 272.829757][ T8638] security_file_ioctl+0xc3/0x2a0 [ 272.829786][ T8638] __se_sys_ioctl+0x47/0x170 [ 272.829815][ T8638] do_syscall_64+0x14d/0xf80 [ 272.829838][ T8638] ? trace_irq_disable+0x3b/0x150 [ 272.829868][ T8638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.829890][ T8638] ? clear_bhb_loop+0x40/0x90 [ 272.829916][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.829938][ T8638] RIP: 0033:0x7f1027b9c799 [ 272.829958][ T8638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.829976][ T8638] RSP: 002b:00007f1028ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.829997][ T8638] RAX: ffffffffffffffda RBX: 00007f1027e15fa0 RCX: 00007f1027b9c799 [ 272.830012][ T8638] RDX: 0000200000000000 RSI: 000000004048aecb RDI: 000000000000000b [ 272.830026][ T8638] RBP: 00007f1028ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.830039][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.830050][ T8638] R13: 00007f1027e16038 R14: 00007f1027e15fa0 R15: 00007f1027f3fa48 [ 272.830082][ T8638] [ 272.830103][ T8638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.211638][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.244700][ T8652] loop2: detected capacity change from 0 to 7 [ 273.262573][ T5954] Dev loop2: unable to read RDB block 7 [ 273.283780][ T5954] loop2: AHDI p3 [ 273.289867][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.300352][ T5954] loop2: partition table partially beyond EOD, truncated [ 273.465516][ T8652] Dev loop2: unable to read RDB block 7 [ 273.473973][ T8652] loop2: AHDI p3 [ 273.481791][ T8652] loop2: partition table partially beyond EOD, truncated [ 273.743831][ T8660] FAULT_INJECTION: forcing a failure. [ 273.743831][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 273.756841][ T8660] CPU: 0 UID: 0 PID: 8660 Comm: syz.2.759 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.756894][ T8660] Tainted: [L]=SOFTLOCKUP [ 273.756901][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.756913][ T8660] Call Trace: [ 273.756923][ T8660] [ 273.756934][ T8660] dump_stack_lvl+0xe8/0x150 [ 273.756967][ T8660] should_fail_ex+0x412/0x560 [ 273.756996][ T8660] should_failslab+0xa8/0x100 [ 273.757017][ T8660] ? skb_clone+0x212/0x3a0 [ 273.757036][ T8660] kmem_cache_alloc_noprof+0x87/0x650 [ 273.757055][ T8660] ? __pfx_br_multicast_count+0x10/0x10 [ 273.757079][ T8660] skb_clone+0x212/0x3a0 [ 273.757100][ T8660] br_flood+0x6cb/0xb80 [ 273.757130][ T8660] ? br_dev_xmit+0x193/0x1980 [ 273.757154][ T8660] br_dev_xmit+0x12bd/0x1980 [ 273.757177][ T8660] ? br_dev_xmit+0x193/0x1980 [ 273.757206][ T8660] ? __pfx_br_dev_xmit+0x10/0x10 [ 273.757229][ T8660] ? __lock_acquire+0x6b5/0x2cf0 [ 273.757253][ T8660] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 273.757274][ T8660] ? skb_network_protocol+0x23d/0x3f0 [ 273.757295][ T8660] ? __pfx_passthru_features_check+0x10/0x10 [ 273.757318][ T8660] dev_hard_start_xmit+0x2d8/0x870 [ 273.757349][ T8660] __dev_queue_xmit+0x16d1/0x3890 [ 273.757375][ T8660] ? __dev_queue_xmit+0x277/0x3890 [ 273.757406][ T8660] ? ___neigh_create+0x1c5f/0x2280 [ 273.757430][ T8660] ? __local_bh_enable_ip+0xd0/0x130 [ 273.757451][ T8660] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.757469][ T8660] ? __pfx___dev_queue_xmit+0x10/0x10 [ 273.757490][ T8660] ? neigh_resolve_output+0x438/0x750 [ 273.757515][ T8660] ? eth_header+0x11b/0x200 [ 273.757532][ T8660] ? __asan_memcpy+0x40/0x70 [ 273.757548][ T8660] ? eth_header+0x11b/0x200 [ 273.757566][ T8660] ? __pfx_eth_header+0x10/0x10 [ 273.757580][ T8660] ? neigh_resolve_output+0x624/0x750 [ 273.757612][ T8660] ? ip6_output+0x126/0x550 [ 273.757637][ T8660] ip6_output+0x340/0x550 [ 273.757664][ T8660] ? ip6_mr_output+0x1f3/0x11c0 [ 273.757678][ T8660] ip6_mr_output+0x549/0x11c0 [ 273.757694][ T8660] ? irqentry_exit+0x59e/0x620 [ 273.757717][ T8660] ? ip6_mr_output+0x1f3/0x11c0 [ 273.757732][ T8660] ? __pfx_ip6_mr_output+0x10/0x10 [ 273.757749][ T8660] ? __ip6_local_out+0x15c/0x940 [ 273.757773][ T8660] ? __ip6_local_out+0x8f8/0x940 [ 273.757794][ T8660] ? __ip6_local_out+0x15c/0x940 [ 273.757816][ T8660] ? __pfx___ip6_local_out+0x10/0x10 [ 273.757849][ T8660] ? ip6_local_out+0x16e/0x190 [ 273.757868][ T8660] ? ip6_send_skb+0x10f/0x390 [ 273.757885][ T8660] ip6_send_skb+0x1d5/0x390 [ 273.757907][ T8660] rawv6_push_pending_frames+0x65e/0x810 [ 273.757932][ T8660] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 273.757954][ T8660] ? __pfx_raw6_getfrag+0x10/0x10 [ 273.757976][ T8660] rawv6_sendmsg+0x1387/0x18e0 [ 273.758004][ T8660] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 273.758032][ T8660] ? aa_sk_perm+0x6d5/0x900 [ 273.758060][ T8660] ? __pfx_aa_sk_perm+0x10/0x10 [ 273.758083][ T8660] ? __fget_files+0x3a0/0x420 [ 273.758105][ T8660] ? sock_rps_record_flow+0x19/0x400 [ 273.758123][ T8660] ? __pfx_inet_sendmsg+0x10/0x10 [ 273.758142][ T8660] ? inet_sendmsg+0x2f4/0x370 [ 273.758160][ T8660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.758177][ T8660] ? __pfx_inet_sendmsg+0x10/0x10 [ 273.758196][ T8660] __sys_sendto+0x5de/0x710 [ 273.758215][ T8660] ? __pfx___sys_sendto+0x10/0x10 [ 273.758229][ T8660] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 273.758257][ T8660] ? __fget_files+0x3a0/0x420 [ 273.758287][ T8660] ? ksys_write+0x242/0x270 [ 273.758306][ T8660] ? __pfx_ksys_write+0x10/0x10 [ 273.758327][ T8660] __x64_sys_sendto+0xde/0x100 [ 273.758345][ T8660] do_syscall_64+0x14d/0xf80 [ 273.758363][ T8660] ? trace_irq_disable+0x3b/0x150 [ 273.758390][ T8660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.758406][ T8660] ? clear_bhb_loop+0x40/0x90 [ 273.758425][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.758441][ T8660] RIP: 0033:0x7f53a099c799 [ 273.758457][ T8660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.758470][ T8660] RSP: 002b:00007f53a1814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 273.758487][ T8660] RAX: ffffffffffffffda RBX: 00007f53a0c15fa0 RCX: 00007f53a099c799 [ 273.758498][ T8660] RDX: 0000000000000072 RSI: 0000200000000300 RDI: 0000000000000004 [ 273.758508][ T8660] RBP: 00007f53a1814090 R08: 0000000000000000 R09: fffffffffffffdfd [ 273.758518][ T8660] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 273.758528][ T8660] R13: 00007f53a0c16038 R14: 00007f53a0c15fa0 R15: 00007f53a0d3fa48 [ 273.758552][ T8660] [ 274.211607][ T5923] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 274.434146][ T5923] usb 1-1: device descriptor read/64, error -71 [ 274.558880][ T8665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.676986][ T5923] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 274.834150][ T5923] usb 1-1: device descriptor read/64, error -71 [ 274.930731][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 274.944875][ T5923] usb usb1-port1: attempt power cycle [ 274.958058][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.056664][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.277502][ T8683] loop2: detected capacity change from 0 to 7 [ 275.301014][ T8683] Dev loop2: unable to read RDB block 7 [ 275.307854][ T5923] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 275.442632][ T8683] loop2: unable to read partition table [ 275.449587][ T5923] usb 1-1: device descriptor read/8, error -71 [ 275.459323][ T8683] loop2: partition table beyond EOD, truncated [ 275.474489][ T8683] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 275.714683][ T5923] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 275.744866][ T5923] usb 1-1: device descriptor read/8, error -71 [ 275.784437][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.803865][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.856413][ T5923] usb usb1-port1: unable to enumerate USB device [ 275.898817][ T8692] fuse: Unknown parameter 'g' [ 275.964175][ T5928] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 276.114195][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 276.121439][ T5928] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 276.130268][ T5928] usb 4-1: can't read configurations, error -61 [ 276.273539][ T5928] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 276.344342][ T8699] kAFS: unable to lookup cell '' [ 276.396228][ T30] audit: type=1326 audit(1774174505.110:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 276.460206][ T30] audit: type=1326 audit(1774174505.110:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 276.484294][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 276.492341][ T30] audit: type=1326 audit(1774174505.110:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 276.515483][ T30] audit: type=1326 audit(1774174505.120:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 276.542139][ T30] audit: type=1326 audit(1774174505.120:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 276.543314][ T5928] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 276.575849][ T30] audit: type=1326 audit(1774174505.120:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f696355cfce code=0x7ffc0000 [ 276.602900][ T30] audit: type=1326 audit(1774174505.120:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 276.705236][ T30] audit: type=1326 audit(1774174505.120:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 276.747216][ T5928] usb 4-1: can't read configurations, error -61 [ 276.761510][ T30] audit: type=1326 audit(1774174505.120:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 276.828308][ T5928] usb usb4-port1: attempt power cycle [ 276.843563][ T30] audit: type=1326 audit(1774174505.120:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 276.952385][ T8708] FAULT_INJECTION: forcing a failure. [ 276.952385][ T8708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.004993][ T8708] CPU: 0 UID: 0 PID: 8708 Comm: syz.0.772 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.005020][ T8708] Tainted: [L]=SOFTLOCKUP [ 277.005026][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.005035][ T8708] Call Trace: [ 277.005042][ T8708] [ 277.005049][ T8708] dump_stack_lvl+0xe8/0x150 [ 277.005076][ T8708] should_fail_ex+0x412/0x560 [ 277.005111][ T8708] _copy_to_user+0x31/0xb0 [ 277.005131][ T8708] simple_read_from_buffer+0xe1/0x170 [ 277.005157][ T8708] proc_fail_nth_read+0x1bb/0x230 [ 277.005182][ T8708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.005207][ T8708] ? rw_verify_area+0x2a6/0x4d0 [ 277.005223][ T8708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.005247][ T8708] vfs_read+0x20c/0xa70 [ 277.005261][ T8708] ? fdget_pos+0x246/0x320 [ 277.005288][ T8708] ? __pfx___mutex_lock+0x10/0x10 [ 277.005307][ T8708] ? __pfx_vfs_read+0x10/0x10 [ 277.005325][ T8708] ? __fget_files+0x2a/0x420 [ 277.005352][ T8708] ? __fget_files+0x3a0/0x420 [ 277.005374][ T8708] ? __fget_files+0x2a/0x420 [ 277.005403][ T8708] ksys_read+0x150/0x270 [ 277.005421][ T8708] ? __pfx_ksys_read+0x10/0x10 [ 277.005445][ T8708] do_syscall_64+0x14d/0xf80 [ 277.005463][ T8708] ? trace_irq_disable+0x3b/0x150 [ 277.005486][ T8708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.005502][ T8708] ? clear_bhb_loop+0x40/0x90 [ 277.005521][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.005536][ T8708] RIP: 0033:0x7ff69455cfce [ 277.005550][ T8708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 277.005567][ T8708] RSP: 002b:00007ff6953a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.005584][ T8708] RAX: ffffffffffffffda RBX: 00007ff6953a56c0 RCX: 00007ff69455cfce [ 277.005596][ T8708] RDX: 000000000000000f RSI: 00007ff6953a50a0 RDI: 0000000000000005 [ 277.005606][ T8708] RBP: 00007ff6953a5090 R08: 0000000000000000 R09: 0000000000000000 [ 277.005615][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.005624][ T8708] R13: 00007ff694816038 R14: 00007ff694815fa0 R15: 00007ff69493fa48 [ 277.005648][ T8708] [ 277.473259][ T5928] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 277.524091][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 277.544928][ T5928] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 277.554117][ T5928] usb 4-1: can't read configurations, error -61 [ 277.633979][ T29] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 277.794390][ T5928] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 277.814149][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 277.820131][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 277.847013][ T5928] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 277.858060][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.867645][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.883557][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.892941][ T5928] usb 4-1: can't read configurations, error -61 [ 277.901293][ T29] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 277.911404][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.924060][ T29] usb 3-1: Product: syz [ 277.928945][ T5928] usb usb4-port1: unable to enumerate USB device [ 277.936359][ T29] usb 3-1: Manufacturer: syz [ 277.941000][ T29] usb 3-1: SerialNumber: syz [ 278.386313][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.432971][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.498495][ T29] usb 3-1: skipping empty audio interface (v1) [ 278.594646][ T8716] loop2: detected capacity change from 0 to 7 [ 278.608028][ T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 278.635496][ T29] usb 3-1: USB disconnect, device number 48 [ 278.642761][ T8716] Dev loop2: unable to read RDB block 7 [ 278.693709][ T8716] loop2: unable to read partition table [ 278.700293][ T8716] loop2: partition table beyond EOD, truncated [ 278.727420][ T8716] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.808534][ T5194] Dev loop2: unable to read RDB block 7 [ 278.828247][ T5194] loop2: unable to read partition table [ 278.839019][ T5194] loop2: partition table beyond EOD, truncated [ 279.136183][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 279.328657][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.432508][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.481104][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 279.506520][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.547577][ T10] usb 4-1: config 0 descriptor?? [ 280.106848][ T10] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 280.141610][ T10] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 280.163914][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.000C/input/input18 [ 280.210029][ T10] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 280.309699][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.319395][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.346664][ T8758] loop5: detected capacity change from 0 to 7 [ 280.353642][ T8759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.373509][ T5885] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 280.375450][ T29] usb 4-1: USB disconnect, device number 45 [ 280.403968][ T8758] loop5: [ 280.408252][ T8758] loop5: partition table partially beyond EOD, truncated [ 280.417688][ T8759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.533956][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 280.542451][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 280.554964][ T5885] usb 3-1: config 17 has an invalid interface number: 9 but max is 1 [ 280.567432][ T5885] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 280.579400][ T5885] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 280.593982][ T5885] usb 3-1: config 17 has no interface number 0 [ 280.601314][ T5885] usb 3-1: config 17 interface 9 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.615036][ T5885] usb 3-1: config 17 interface 9 has no altsetting 0 [ 280.634342][ T5885] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 280.655958][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.665390][ T5885] usb 3-1: Product: syz [ 280.670474][ T5885] usb 3-1: Manufacturer: syz [ 280.675237][ T5885] usb 3-1: SerialNumber: syz [ 280.751478][ T8762] loop2: detected capacity change from 0 to 7 [ 280.787914][ T8762] Dev loop2: unable to read RDB block 7 [ 280.817130][ T8762] loop2: unable to read partition table [ 280.836022][ T8762] loop2: partition table beyond EOD, truncated [ 280.854143][ T8762] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.906069][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.919803][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.966459][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.984063][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.027153][ T8769] loop2: detected capacity change from 0 to 7 [ 281.035826][ T5954] Dev loop2: unable to read RDB block 7 [ 281.063541][ T5954] loop2: unable to read partition table [ 281.069527][ T5954] loop2: partition table beyond EOD, truncated [ 281.075988][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 281.114575][ T8769] Dev loop2: unable to read RDB block 7 [ 281.120261][ T8769] loop2: unable to read partition table [ 281.128890][ T5885] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.186995][ T8769] loop2: partition table beyond EOD, truncated [ 281.206498][ T8769] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 281.253640][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 281.269464][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.314040][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.332147][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.354874][ T8776] netlink: 'syz.2.795': attribute type 1 has an invalid length. [ 281.393544][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.425675][ T5885] snd-usb-audio 3-1:17.9: probe with driver snd-usb-audio failed with error -2 [ 281.465358][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.487054][ T5885] usb 3-1: USB disconnect, device number 49 [ 281.493719][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.518958][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.529845][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.551807][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.583613][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.627038][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.647513][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.663038][ T8784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.686834][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.699518][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.724079][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.735931][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.747740][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 281.773780][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 281.785025][ T10] usb 1-1: Product: syz [ 281.789254][ T10] usb 1-1: Manufacturer: syz [ 281.794378][ T10] usb 1-1: SerialNumber: syz [ 281.803040][ T10] usb 1-1: config 0 descriptor?? [ 281.901130][ T10] yurex 1-1:0.0: Could not find endpoints [ 282.137941][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.166542][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.204881][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.229231][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.239586][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.250029][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.322850][ T10] usb 1-1: USB disconnect, device number 51 [ 282.439716][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.545255][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.568141][ T8802] loop2: detected capacity change from 0 to 7 [ 282.618108][ T8802] Dev loop2: unable to read RDB block 7 [ 282.626364][ T8802] loop2: unable to read partition table [ 282.696756][ T8802] loop2: partition table beyond EOD, truncated [ 282.719330][ T8802] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 282.775799][ T5194] Dev loop2: unable to read RDB block 7 [ 282.795988][ T5194] loop2: unable to read partition table [ 282.812266][ T5194] loop2: partition table beyond EOD, truncated [ 283.278056][ T8814] loop2: detected capacity change from 0 to 7 [ 283.305033][ T29] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 283.325598][ T8814] Dev loop2: unable to read RDB block 7 [ 283.332248][ T8814] loop2: AHDI p3 [ 283.340145][ T8814] loop2: partition table partially beyond EOD, truncated [ 283.424459][ T5928] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 283.504192][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 283.523229][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 283.540113][ T8818] loop2: detected capacity change from 0 to 7 [ 283.564870][ T5954] Dev loop2: unable to read RDB block 7 [ 283.573096][ T5954] loop2: unable to read partition table [ 283.573338][ T29] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 283.588402][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.604018][ T29] usb 1-1: Product: syz [ 283.608488][ T29] usb 1-1: Manufacturer: syz [ 283.613527][ T29] usb 1-1: SerialNumber: syz [ 283.624296][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 283.635183][ T29] usb 1-1: config 0 descriptor?? [ 283.641057][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 283.650425][ T5928] usb 3-1: can't read configurations, error -61 [ 283.659592][ T29] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 283.670477][ T5954] loop2: partition table beyond EOD, truncated [ 283.670802][ T29] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 283.688963][ T8818] Dev loop2: unable to read RDB block 7 [ 283.696491][ T8818] loop2: unable to read partition table [ 283.702568][ T8818] loop2: partition table beyond EOD, truncated [ 283.709679][ T8818] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 283.804148][ T5928] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 283.847867][ T5885] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 283.965755][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 283.976134][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 283.986114][ T5928] usb 3-1: can't read configurations, error -61 [ 283.993580][ T5928] usb usb3-port1: attempt power cycle [ 284.013514][ T5885] usb 4-1: device descriptor read/64, error -71 [ 284.263105][ T29] em28xx 1-1:0.0: chip ID is em2874 [ 284.283493][ T5885] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 284.354167][ T5928] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 284.417805][ T5885] usb 4-1: device descriptor read/64, error -71 [ 284.431427][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 284.440701][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 284.448476][ T5928] usb 3-1: can't read configurations, error -61 [ 284.535647][ T5885] usb usb4-port1: attempt power cycle [ 284.594356][ T5928] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 284.625331][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 284.639450][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 284.652213][ T5928] usb 3-1: can't read configurations, error -61 [ 284.665653][ T5928] usb usb3-port1: unable to enumerate USB device [ 284.880533][ T29] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 284.893653][ T5885] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 284.924672][ T5885] usb 4-1: device descriptor read/8, error -71 [ 284.945388][ T29] em28xx 1-1:0.0: board has no eeprom [ 285.173759][ T5885] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 285.226287][ T5885] usb 4-1: device descriptor read/8, error -71 [ 285.342932][ T5885] usb usb4-port1: unable to enumerate USB device [ 285.360994][ T8838] fuse: Bad value for 'fd' [ 285.368848][ T8840] netlink: 80 bytes leftover after parsing attributes in process `syz.4.816'. [ 285.378423][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.391007][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.403786][ T8838] fuse: Invalid gid '0x0000000000000008' [ 285.977706][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 286.001528][ T8850] loop2: detected capacity change from 0 to 7 [ 286.016398][ T8850] Dev loop2: unable to read RDB block 7 [ 286.026103][ T8809] em28xx 1-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 286.046269][ T8850] loop2: AHDI p3 [ 286.069738][ T8845] bond1: (slave vcan1): refused to change device type [ 286.081554][ T8850] loop2: partition table partially beyond EOD, truncated [ 286.089346][ T29] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 286.101223][ T29] em28xx 1-1:0.0: dvb set to bulk mode. [ 286.123358][ T5928] em28xx 1-1:0.0: Binding DVB extension [ 286.337259][ T5928] em28xx 1-1:0.0: Registering input extension [ 286.554699][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 286.554720][ T30] audit: type=1326 audit(1774174515.320:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.3.824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1027b9c799 code=0x0 [ 286.587996][ T5928] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 286.608313][ T5928] Registered IR keymap rc-empty [ 286.628203][ T8859] netlink: 'syz.2.820': attribute type 11 has an invalid length. [ 286.648318][ T5928] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 286.735196][ T5928] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 286.932549][ T8882] fuse: Bad value for 'fd' [ 287.162342][ T5885] usb 1-1: USB disconnect, device number 52 [ 287.178702][ T5885] em28xx 1-1:0.0: Disconnecting em28xx [ 287.269639][ T5928] em28xx 1-1:0.0: Input extension successfully initialized [ 287.305141][ T5885] em28xx 1-1:0.0: Closing input extension [ 287.445792][ T5885] em28xx 1-1:0.0: Freeing device [ 287.618598][ T8886] geneve2: entered promiscuous mode [ 287.648671][ T8886] geneve2: entered allmulticast mode [ 287.933705][ T5885] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 288.096575][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 288.139796][ T5885] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 288.160071][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.185513][ T8895] loop2: detected capacity change from 0 to 7 [ 288.189159][ T5885] usb 5-1: Product: syz [ 288.202197][ T5885] usb 5-1: Manufacturer: syz [ 288.207152][ T5885] usb 5-1: SerialNumber: syz [ 288.237229][ T8895] Dev loop2: unable to read RDB block 7 [ 288.247676][ T8895] loop2: AHDI p3 [ 288.259116][ T5885] usb 5-1: config 0 descriptor?? [ 288.284604][ T8895] loop2: partition table partially beyond EOD, truncated [ 288.524108][ T5885] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 288.659185][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.832'. [ 288.873422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 288.882194][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 289.056725][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.067128][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.091479][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.120400][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 289.133771][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 289.154966][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.177941][ T9] usb 1-1: config 0 descriptor?? [ 289.294251][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 289.304008][ T10] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 289.319324][ T10] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 289.344977][ T10] usb 3-1: config 0 has no interface number 0 [ 289.360209][ T10] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 289.399374][ T10] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 289.464370][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 289.476561][ T10] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 289.516813][ T10] usb 3-1: Product: syz [ 289.521165][ T10] usb 3-1: Manufacturer: syz [ 289.529970][ T10] usb 3-1: config 0 descriptor?? [ 289.580022][ T8888] fuse: Bad value for 'fd' [ 289.590295][ T5885] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 289.613250][ T5885] usb 5-1: USB disconnect, device number 38 [ 289.761261][ T1217] usb 3-1: USB disconnect, device number 54 [ 289.938309][ T9] wacom 0003:056A:0010.000D: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 289.966415][ T9] wacom 0003:056A:0010.000D: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.0-1/input0 [ 290.026082][ T9] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0010.000D/input/input20 [ 290.180118][ T8913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.214444][ T8913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.307163][ T8920] loop5: detected capacity change from 0 to 7 [ 290.325516][ T8920] loop5: [ 290.333112][ T8920] loop5: partition table partially beyond EOD, truncated [ 290.497671][ T5928] usb 1-1: USB disconnect, device number 53 [ 290.593165][ T8924] IPv6: sit1: Disabled Multicast RS [ 290.644535][ T6251] tipc: Subscription rejected, illegal request [ 290.675400][ T8929] loop2: detected capacity change from 0 to 7 [ 290.686788][ T5954] Dev loop2: unable to read RDB block 7 [ 290.692949][ T5954] loop2: unable to read partition table [ 290.699753][ T5954] loop2: partition table beyond EOD, truncated [ 290.709365][ T8929] Dev loop2: unable to read RDB block 7 [ 290.717625][ T8929] loop2: unable to read partition table [ 290.724706][ T8929] loop2: partition table beyond EOD, truncated [ 290.733805][ T8929] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 291.262397][ T29] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 291.513545][ T9] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 291.699073][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.710878][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 291.723342][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 291.732404][ T8951] input: syz1 as /devices/virtual/input/input23 [ 291.736539][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.754242][ T29] usb 4-1: device descriptor read/64, error -71 [ 291.805611][ T8951] netlink: 'syz.2.849': attribute type 1 has an invalid length. [ 291.820011][ T9] usb 5-1: config 0 descriptor?? [ 291.844673][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 291.871118][ T8951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.893179][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 291.909581][ T8956] bond1: (slave ip6gretap1): making interface the new active one [ 291.924562][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 291.942158][ T8956] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 291.953184][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 291.979601][ T9] usb 5-1: media controller created [ 291.994100][ T29] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 292.011768][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.042746][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.845'. [ 292.097833][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 292.114585][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 292.146099][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 292.166587][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 292.180375][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 292.210539][ T29] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 292.224324][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 292.330105][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.345349][ T29] usb 4-1: Product: syz [ 292.350120][ T29] usb 4-1: Manufacturer: syz [ 292.357474][ T29] usb 4-1: SerialNumber: syz [ 292.370414][ T9] usb 5-1: USB disconnect, device number 39 [ 292.375543][ T29] usb 4-1: config 0 descriptor?? [ 292.438775][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 292.589586][ T29] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 293.042186][ T8971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.601298][ T8943] fuse: Bad value for 'fd' [ 293.629934][ T29] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 293.701834][ T29] usb 4-1: USB disconnect, device number 51 [ 294.153547][ T1217] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 294.356285][ T1217] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 294.372985][ T1217] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.407097][ T8984] netlink: 'syz.3.858': attribute type 2 has an invalid length. [ 294.457879][ T1217] usb 3-1: config 0 has no interface number 0 [ 294.473541][ T1217] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 294.492765][ T8984] : entered promiscuous mode [ 294.493021][ T8988] loop5: detected capacity change from 0 to 7 [ 294.515105][ T8988] Dev loop5: unable to read RDB block 7 [ 294.520753][ T8988] loop5: unable to read partition table [ 294.532247][ T1217] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 294.554843][ T1217] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.568404][ T8988] loop5: partition table beyond EOD, truncated [ 294.583577][ T8988] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 294.620273][ T1217] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 294.639289][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.673278][ T1217] usb 3-1: Product: syz [ 294.703513][ T1217] usb 3-1: Manufacturer: syz [ 294.708193][ T1217] usb 3-1: SerialNumber: syz [ 294.751997][ T1217] usb 3-1: config 0 descriptor?? [ 294.784509][ T1217] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 294.826482][ T1217] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 294.858023][ T1217] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 295.151809][ T1217] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 295.184135][ T29] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 295.185356][ T5885] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 295.209088][ T9] usb 3-1: USB disconnect, device number 55 [ 295.224705][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 295.249132][ T9] cyberjack 3-1:0.69: device disconnected [ 295.293760][ T1217] usb 4-1: device descriptor read/64, error -71 [ 295.346013][ T29] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.356481][ T29] usb 1-1: config 0 has no interface number 0 [ 295.362646][ T29] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 295.374482][ T29] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.389290][ T29] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 295.399268][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.410063][ T29] usb 1-1: config 0 descriptor?? [ 295.418531][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.429379][ T29] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 295.456375][ T5885] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 295.468728][ T5885] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 295.479440][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.501189][ T5885] usb 5-1: config 0 descriptor?? [ 295.516754][ T5885] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 295.527116][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 295.543545][ T1217] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 295.555803][ T5885] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 295.568861][ T5885] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 295.576411][ T5885] usb 5-1: media controller created [ 295.582947][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.595900][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 295.601918][ T5885] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 295.612355][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 295.630689][ T5885] dvb-usb: schedule remote query interval to 150 msecs. [ 295.640858][ T5885] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 295.693679][ T1217] usb 4-1: device descriptor read/64, error -71 [ 295.719854][ T8996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.862'. [ 295.767417][ T5885] usb 5-1: USB disconnect, device number 40 [ 295.802247][ T5885] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 295.819101][ T1217] usb usb4-port1: attempt power cycle [ 296.183644][ T1217] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 296.224428][ T1217] usb 4-1: device descriptor read/8, error -71 [ 296.428636][ T9018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.436004][ T9018] IPv6: NLM_F_CREATE should be set when creating new route [ 296.443489][ T9018] IPv6: NLM_F_CREATE should be set when creating new route [ 296.450818][ T9018] IPv6: NLM_F_CREATE should be set when creating new route [ 296.602115][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.612072][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.645202][ T1217] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 296.689827][ T1217] usb 4-1: device descriptor read/8, error -71 [ 296.834848][ T1217] usb usb4-port1: unable to enumerate USB device [ 297.729170][ T9028] syzkaller0: entered promiscuous mode [ 297.744440][ T9028] syzkaller0: entered allmulticast mode [ 297.899175][ T9033] loop2: detected capacity change from 0 to 7 [ 297.926596][ T9033] loop2: [ 297.934898][ T9033] loop2: partition table partially beyond EOD, truncated [ 297.962957][ T5917] usb 1-1: USB disconnect, device number 54 [ 298.063104][ T9036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.875'. [ 298.118118][ T9037] netlink: 52 bytes leftover after parsing attributes in process `syz.4.874'. [ 298.256044][ T9049] loop2: detected capacity change from 0 to 7 [ 298.281091][ T9049] Dev loop2: unable to read RDB block 7 [ 298.321418][ T9049] loop2: unable to read partition table [ 298.351091][ T9049] loop2: partition table beyond EOD, truncated [ 298.377133][ T9049] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 298.594857][ T5917] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 298.693990][ T29] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 298.723700][ T1217] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 298.756269][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.767706][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 298.778125][ T5917] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 298.788095][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.799260][ T5917] usb 1-1: config 0 descriptor?? [ 298.808765][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 298.817465][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 298.824095][ T29] usb 4-1: device descriptor read/64, error -71 [ 298.836666][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 298.846387][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 298.854272][ T5917] usb 1-1: media controller created [ 298.860796][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.876230][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 298.882217][ T5917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 298.893342][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 298.893495][ T1217] usb 3-1: Using ep0 maxpacket: 16 [ 298.915150][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 298.919091][ T1217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 298.922358][ T5917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 298.944145][ T1217] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 298.954244][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.962433][ T1217] usb 3-1: Product: syz [ 298.967274][ T1217] usb 3-1: Manufacturer: syz [ 298.972344][ T1217] usb 3-1: SerialNumber: syz [ 298.980012][ T1217] usb 3-1: config 0 descriptor?? [ 298.989077][ T1217] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 298.999105][ T1217] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 299.020054][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.879'. [ 299.055395][ T5885] usb 1-1: USB disconnect, device number 55 [ 299.064156][ T29] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 299.088784][ T5885] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 299.204180][ T29] usb 4-1: device descriptor read/64, error -71 [ 299.299452][ T30] audit: type=1326 audit(1774174528.070:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 299.310191][ T9061] loop5: detected capacity change from 0 to 7 [ 299.334301][ T30] audit: type=1326 audit(1774174528.100:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 299.357383][ T5954] Dev loop5: unable to read RDB block 7 [ 299.357653][ T29] usb usb4-port1: attempt power cycle [ 299.363234][ T5954] loop5: unable to read partition table [ 299.379287][ T30] audit: type=1326 audit(1774174528.100:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 299.402922][ T5954] loop5: partition table beyond EOD, truncated [ 299.414391][ T9061] Dev loop5: unable to read RDB block 7 [ 299.424888][ T9061] loop5: unable to read partition table [ 299.430967][ T9061] loop5: partition table beyond EOD, truncated [ 299.437925][ T30] audit: type=1326 audit(1774174528.100:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 299.460972][ T9061] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.471053][ T30] audit: type=1326 audit(1774174528.100:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 299.495354][ T30] audit: type=1326 audit(1774174528.100:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 299.521353][ T30] audit: type=1326 audit(1774174528.100:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 299.545336][ T30] audit: type=1326 audit(1774174528.100:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 299.576456][ T30] audit: type=1326 audit(1774174528.100:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f696355cfce code=0x7ffc0000 [ 299.621282][ T1217] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 299.630287][ T30] audit: type=1326 audit(1774174528.100:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696359c799 code=0x7ffc0000 [ 299.739793][ T29] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 299.765243][ T29] usb 4-1: device descriptor read/8, error -71 [ 299.806436][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 299.846088][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.885221][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.014247][ T29] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 300.034132][ T5928] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 300.042476][ T29] usb 4-1: device descriptor read/8, error -71 [ 300.154417][ T29] usb usb4-port1: unable to enumerate USB device [ 300.196100][ T5928] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 300.263204][ T1217] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 300.279172][ T1217] em28xx 3-1:0.0: board has no eeprom [ 300.285177][ T5928] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 300.297023][ T5928] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.310959][ T5928] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.365187][ T9080] Cannot find set identified by id 1 to match [ 300.380833][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.405659][ T5928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.453594][ T1217] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 300.461592][ T1217] em28xx 3-1:0.0: dvb set to bulk mode. [ 300.467488][ T5885] em28xx 3-1:0.0: Binding DVB extension [ 300.486143][ T1217] usb 3-1: USB disconnect, device number 56 [ 300.510184][ T1217] em28xx 3-1:0.0: Disconnecting em28xx [ 300.531473][ T5928] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 300.804949][ T5885] em28xx 3-1:0.0: Registering input extension [ 301.019519][ T1217] em28xx 3-1:0.0: Closing input extension [ 301.116518][ T1217] em28xx 3-1:0.0: Freeing device [ 301.302976][ T5928] usb 1-1: USB disconnect, device number 56 [ 302.384373][ T5928] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 302.423941][ T9101] loop2: detected capacity change from 0 to 7 [ 302.444844][ T9101] Dev loop2: unable to read RDB block 7 [ 302.450525][ T9101] loop2: AHDI p3 [ 302.469932][ T9101] loop2: partition table partially beyond EOD, truncated [ 302.559589][ T5928] usb 4-1: config 1 interface 0 altsetting 248 bulk endpoint 0x82 has invalid maxpacket 8 [ 302.600440][ T5928] usb 4-1: config 1 interface 0 altsetting 248 bulk endpoint 0x3 has invalid maxpacket 16 [ 302.621350][ T5928] usb 4-1: config 1 interface 0 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.642536][ T9091] syz.1.892 (9091): drop_caches: 2 [ 302.669325][ T5928] usb 4-1: config 1 interface 0 has no altsetting 0 [ 302.686429][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.696576][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.716876][ T5928] usb 4-1: Product: á [ 302.721113][ T5928] usb 4-1: Manufacturer: ╤ê•á—‹ë¼¯ä–¾íŸë…³ç±œåƒºå¼¤ë¢¶ê›ç’‡ä€±éšå›¾ì†Žì‡¶éª±ê†‘æ¼ëµ¡ç Œç …è¡“ìŠæ™¸æŒ§â–䞸뱚鼢놃϶à°î®î»‰î¥ ê›Ÿà½šé¦Žì‰¿ë¡«ä˜¡ëµ–㳬솚莀çšê·åˆƒì ‘ᘥ㊓劄 [ 302.745342][ T5928] usb 4-1: SerialNumber: ÐŒ [ 302.776303][ T9098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 302.785701][ T9098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 302.844777][ T1217] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 303.007113][ T1217] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.053539][ T1217] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 303.062590][ T1217] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 303.147943][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.170929][ T1217] usb 5-1: config 0 descriptor?? [ 303.179620][ T9118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.902'. [ 303.193492][ T5885] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 303.208027][ T1217] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 303.225218][ T1217] dvb-usb: bulk message failed: -22 (3/0) [ 303.242567][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 303.268082][ T1217] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 303.298955][ T1217] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 303.327126][ T1217] usb 5-1: media controller created [ 303.355609][ T1217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.364213][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 303.413655][ T5885] usb 1-1: config 0 has no interfaces? [ 303.445145][ T5885] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 303.456467][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.897'. [ 303.466171][ T1217] dvb-usb: bulk message failed: -22 (6/0) [ 303.472038][ T1217] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 303.482047][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.540263][ T5928] usb 4-1: bad CDC descriptors [ 303.568161][ T5885] usb 1-1: Product: syz [ 303.572491][ T5885] usb 1-1: Manufacturer: syz [ 303.576541][ T5928] usb 4-1: USB disconnect, device number 60 [ 303.589373][ T9124] loop2: detected capacity change from 0 to 7 [ 303.608450][ T1217] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 303.623494][ T5885] usb 1-1: SerialNumber: syz [ 303.630216][ T9124] Dev loop2: unable to read RDB block 7 [ 303.638218][ T9124] loop2: unable to read partition table [ 303.645215][ T5885] usb 1-1: config 0 descriptor?? [ 303.656109][ T9124] loop2: partition table beyond EOD, truncated [ 303.662495][ T1217] dvb-usb: schedule remote query interval to 150 msecs. [ 303.679810][ T1217] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 303.679838][ T9124] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 303.700099][ T1217] usb 5-1: USB disconnect, device number 41 [ 303.780043][ T1217] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 303.866924][ T9] usb 1-1: USB disconnect, device number 57 [ 303.902278][ T9133] FAULT_INJECTION: forcing a failure. [ 303.902278][ T9133] name failslab, interval 1, probability 0, space 0, times 0 [ 303.919477][ T9133] CPU: 0 UID: 0 PID: 9133 Comm: syz.1.907 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.919512][ T9133] Tainted: [L]=SOFTLOCKUP [ 303.919520][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.919533][ T9133] Call Trace: [ 303.919542][ T9133] [ 303.919551][ T9133] dump_stack_lvl+0xe8/0x150 [ 303.919584][ T9133] should_fail_ex+0x412/0x560 [ 303.919621][ T9133] should_failslab+0xa8/0x100 [ 303.919651][ T9133] __kmalloc_noprof+0xe8/0x760 [ 303.919675][ T9133] ? tomoyo_encode+0x28b/0x550 [ 303.919712][ T9133] tomoyo_encode+0x28b/0x550 [ 303.919750][ T9133] tomoyo_realpath_from_path+0x58d/0x5d0 [ 303.919794][ T9133] ? tomoyo_path2_perm+0x299/0x760 [ 303.919827][ T9133] tomoyo_path2_perm+0x2e7/0x760 [ 303.919862][ T9133] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 303.919895][ T9133] ? terminate_walk+0x3d7/0x510 [ 303.919941][ T9133] ? do_syscall_64+0x14d/0xf80 [ 303.919964][ T9133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.920006][ T9133] ? apparmor_capable+0x126/0x170 [ 303.920033][ T9133] ? bpf_lsm_capable+0x9/0x20 [ 303.920062][ T9133] ? security_capable+0x7e/0x2c0 [ 303.920094][ T9133] security_sb_pivotroot+0xb6/0x270 [ 303.920128][ T9133] path_pivot_root+0x135/0xdb0 [ 303.920166][ T9133] ? kasan_quarantine_put+0xbb/0x1f0 [ 303.920188][ T9133] ? lockdep_hardirqs_on+0x7a/0x110 [ 303.920212][ T9133] ? __pfx_path_pivot_root+0x10/0x10 [ 303.920246][ T9133] ? kmem_cache_free+0x187/0x630 [ 303.920269][ T9133] ? user_path_at+0xd4/0x160 [ 303.920295][ T9133] ? user_path_at+0xd4/0x160 [ 303.920316][ T9133] __x64_sys_pivot_root+0x15d/0x1d0 [ 303.920371][ T9133] ? __pfx___x64_sys_pivot_root+0x10/0x10 [ 303.920405][ T9133] ? __pfx_ksys_write+0x10/0x10 [ 303.920438][ T9133] do_syscall_64+0x14d/0xf80 [ 303.920467][ T9133] ? trace_irq_disable+0x3b/0x150 [ 303.920498][ T9133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.920519][ T9133] ? clear_bhb_loop+0x40/0x90 [ 303.920546][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.920567][ T9133] RIP: 0033:0x7ffa8a79c799 [ 303.920587][ T9133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.920606][ T9133] RSP: 002b:00007ffa889f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 303.920629][ T9133] RAX: ffffffffffffffda RBX: 00007ffa8aa16090 RCX: 00007ffa8a79c799 [ 303.920645][ T9133] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 303.920659][ T9133] RBP: 00007ffa889f6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.920672][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.920684][ T9133] R13: 00007ffa8aa16128 R14: 00007ffa8aa16090 R15: 00007ffa8ab3fa48 [ 303.920686][ T9135] loop2: detected capacity change from 0 to 7 [ 303.920718][ T9133] [ 303.920769][ T9133] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.983054][ T9135] Dev loop2: unable to read RDB block 7 [ 304.226191][ T5928] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 304.237107][ T9135] loop2: AHDI p3 [ 304.240931][ T9135] loop2: partition table partially beyond EOD, truncated [ 304.386978][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 304.396697][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.410691][ T5928] usb 3-1: config 0 descriptor?? [ 304.422207][ T5928] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 304.556624][ T29] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 304.652219][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 304.694229][ T29] usb 5-1: device descriptor read/64, error -71 [ 304.757427][ T9148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.769398][ T9148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.785700][ T9148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.800984][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.812044][ T9150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.814765][ T9148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.829361][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.839333][ T9150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.934120][ T29] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 304.968569][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.981542][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.046900][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 305.046916][ T30] audit: type=1326 audit(1774174533.820:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8a79c799 code=0x7ffc0000 [ 305.079510][ T29] usb 5-1: device descriptor read/64, error -71 [ 305.086823][ T30] audit: type=1326 audit(1774174533.850:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ffa8a79c799 code=0x7ffc0000 [ 305.145193][ T30] audit: type=1326 audit(1774174533.850:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8a79c799 code=0x7ffc0000 [ 305.194545][ T29] usb usb5-port1: attempt power cycle [ 305.204214][ T30] audit: type=1326 audit(1774174533.850:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8a79c799 code=0x7ffc0000 [ 305.256532][ T30] audit: type=1326 audit(1774174533.890:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffa8a79c799 code=0x7ffc0000 [ 305.319507][ T30] audit: type=1326 audit(1774174533.890:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8a79c799 code=0x7ffc0000 [ 305.374065][ T30] audit: type=1326 audit(1774174533.890:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8a79c799 code=0x7ffc0000 [ 305.438282][ T30] audit: type=1326 audit(1774174533.890:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa8a79c799 code=0x7ffc0000 [ 305.502239][ T30] audit: type=1326 audit(1774174534.270:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8a79c799 code=0x7ffc0000 [ 305.525884][ T30] audit: type=1326 audit(1774174534.300:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8a79c799 code=0x7ffc0000 [ 305.554254][ T29] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 305.713419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 305.749275][ T29] usb 5-1: device descriptor read/8, error -71 [ 306.003954][ T29] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 306.094702][ T29] usb 5-1: device descriptor read/8, error -71 [ 306.244130][ T5917] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 306.254056][ T29] usb usb5-port1: unable to enumerate USB device [ 306.406277][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 306.414083][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.429885][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.471587][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 306.487268][ T5917] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 306.497464][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.531510][ T5917] usb 1-1: config 0 descriptor?? [ 307.203543][ T1217] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 307.367053][ T1217] usb 4-1: config 0 has no interfaces? [ 307.381027][ T5917] nintendo 0003:057E:2019.000E: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 307.394121][ T1217] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 307.403228][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.420457][ T1217] usb 4-1: Product: syz [ 307.425195][ T1217] usb 4-1: Manufacturer: syz [ 307.429879][ T1217] usb 4-1: SerialNumber: syz [ 307.439458][ T1217] usb 4-1: config 0 descriptor?? [ 307.442881][ C1] usb 1-1: input irq status -75 received [ 307.476190][ T9173] fuse: Bad value for 'fd' [ 307.539319][ T5917] nintendo 0003:057E:2019.000E: Failed to get joycon info; ret=-38 [ 307.564903][ T9166] l2tp_ppp: sess 2/0: no socket in recv [ 307.593120][ T5917] nintendo 0003:057E:2019.000E: Failed to retrieve controller info; ret=-38 [ 307.616107][ T5917] nintendo 0003:057E:2019.000E: Failed to initialize controller; ret=-38 [ 307.656276][ T5917] nintendo 0003:057E:2019.000E: probe - fail = -38 [ 307.675998][ T5917] nintendo 0003:057E:2019.000E: probe with driver nintendo failed with error -38 [ 307.703343][ T5917] usb 1-1: USB disconnect, device number 58 [ 307.756786][ T9177] loop2: detected capacity change from 0 to 7 [ 307.769641][ T5954] loop2: [ 307.772830][ T5954] loop2: partition table partially beyond EOD, truncated [ 307.797464][ T9177] loop2: [ 307.801735][ T9177] loop2: partition table partially beyond EOD, truncated [ 307.936899][ T1217] usb 3-1: USB disconnect, device number 57 [ 308.460193][ T9190] netlink: 36 bytes leftover after parsing attributes in process `syz.1.924'. [ 308.565237][ T9200] hsr0: entered promiscuous mode [ 308.680874][ T9207] netlink: 68 bytes leftover after parsing attributes in process `syz.0.929'. [ 308.777028][ T9210] fuse: Bad value for 'fd' [ 308.804755][ T5885] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 308.827203][ T1217] usb 4-1: USB disconnect, device number 61 [ 308.878916][ T9212] netlink: 44 bytes leftover after parsing attributes in process `syz.0.931'. [ 309.006410][ T5885] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 309.035706][ T5885] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 309.072918][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.103171][ T5885] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 309.122872][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.136693][ T5885] usb 5-1: Product: syz [ 309.143122][ T5885] usb 5-1: Manufacturer: syz [ 309.153257][ T5885] usb 5-1: SerialNumber: syz [ 309.172373][ T5885] usb 5-1: config 0 descriptor?? [ 309.185889][ T5885] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 309.206242][ T9220] loop2: detected capacity change from 0 to 7 [ 309.214930][ T9220] loop2: [ 309.218481][ T9220] loop2: partition table partially beyond EOD, truncated [ 309.253512][ T5917] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 309.284188][ T1217] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 309.295339][ T9222] loop5: detected capacity change from 0 to 7 [ 309.302560][ T9222] Dev loop5: unable to read RDB block 7 [ 309.313223][ T9222] loop5: unable to read partition table [ 309.320247][ T9222] loop5: partition table beyond EOD, truncated [ 309.327538][ T9222] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 309.369377][ T9224] FAULT_INJECTION: forcing a failure. [ 309.369377][ T9224] name failslab, interval 1, probability 0, space 0, times 0 [ 309.387347][ T9224] CPU: 0 UID: 0 PID: 9224 Comm: syz.1.937 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.387381][ T9224] Tainted: [L]=SOFTLOCKUP [ 309.387389][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.387402][ T9224] Call Trace: [ 309.387411][ T9224] [ 309.387419][ T9224] dump_stack_lvl+0xe8/0x150 [ 309.387454][ T9224] should_fail_ex+0x412/0x560 [ 309.387491][ T9224] should_failslab+0xa8/0x100 [ 309.387520][ T9224] __kmalloc_noprof+0xe8/0x760 [ 309.387545][ T9224] ? io_cache_alloc_new+0x40/0x100 [ 309.387582][ T9224] io_cache_alloc_new+0x40/0x100 [ 309.387616][ T9224] __io_prep_rw+0x2bd/0xed0 [ 309.387647][ T9224] ? __pfx___io_prep_rw+0x10/0x10 [ 309.387666][ T9224] ? percpu_ref_get_many+0x21/0x1e0 [ 309.387698][ T9224] ? percpu_ref_get_many+0x21/0x1e0 [ 309.387736][ T9224] ? io_nop+0x3cc/0x5d0 [ 309.387757][ T9224] io_prep_rwv+0x8e/0x440 [ 309.387780][ T9224] ? __pfx_io_prep_rwv+0x10/0x10 [ 309.387804][ T9224] ? io_issue_sqe+0x5d4/0xf90 [ 309.387826][ T9224] ? __asan_memset+0x22/0x50 [ 309.387852][ T9224] io_submit_sqes+0xb6d/0x2400 [ 309.387913][ T9224] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 309.387940][ T9224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.387971][ T9224] ? __fget_files+0x3a0/0x420 [ 309.388007][ T9224] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 309.388031][ T9224] ? fput+0xa0/0xd0 [ 309.388062][ T9224] ? ksys_write+0x242/0x270 [ 309.388087][ T9224] ? __pfx_ksys_write+0x10/0x10 [ 309.388117][ T9224] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 309.388154][ T9224] do_syscall_64+0x14d/0xf80 [ 309.388175][ T9224] ? trace_irq_disable+0x3b/0x150 [ 309.388204][ T9224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.388224][ T9224] ? clear_bhb_loop+0x40/0x90 [ 309.388248][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.388267][ T9224] RIP: 0033:0x7ffa8a79c799 [ 309.388285][ T9224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.388302][ T9224] RSP: 002b:00007ffa8b587028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 309.388322][ T9224] RAX: ffffffffffffffda RBX: 00007ffa8aa15fa0 RCX: 00007ffa8a79c799 [ 309.388336][ T9224] RDX: 0000000020000000 RSI: 00000000000020a0 RDI: 0000000000000004 [ 309.388348][ T9224] RBP: 00007ffa8b587090 R08: 0000000000000000 R09: 0000000000000000 [ 309.388360][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.388371][ T9224] R13: 00007ffa8aa16038 R14: 00007ffa8aa15fa0 R15: 00007ffa8ab3fa48 [ 309.388402][ T9224] [ 309.390949][ T9198] hsr0: left promiscuous mode [ 309.493169][ T1217] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 309.500071][ T29] usb 5-1: USB disconnect, device number 46 [ 309.515353][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.515383][ T1217] usb 1-1: Product: syz [ 309.515399][ T1217] usb 1-1: Manufacturer: syz [ 309.515416][ T1217] usb 1-1: SerialNumber: syz [ 309.569465][ T1217] usb 1-1: config 0 descriptor?? [ 309.627270][ T5917] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 309.733165][ T1217] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 309.762545][ T9226] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 309.780574][ T9226] netlink: 16158 bytes leftover after parsing attributes in process `syz.3.938'. [ 309.797252][ T5917] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 309.835705][ T5917] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.851212][ T5917] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 309.865058][ T5917] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 309.884730][ T5917] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 309.892414][ T5917] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 309.904466][ T5917] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.934703][ T5917] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 309.950113][ T5917] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 309.963282][ T5917] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 309.971579][ T5917] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 309.986044][ T5917] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.999060][ T5917] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 310.013210][ T5917] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 310.042124][ T5917] usb 3-1: string descriptor 0 read error: -22 [ 310.049374][ T5917] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 310.059240][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.084339][ T5917] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 310.243415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 310.296559][ T9238] fuse: Bad value for 'fd' [ 310.467516][ T9] usb 3-1: USB disconnect, device number 58 [ 310.723185][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 310.774324][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.809188][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.031516][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.041002][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.345321][ T1217] gspca_sunplus: reg_w_riv err -110 [ 311.350767][ T1217] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 312.209351][ T5917] usb 1-1: USB disconnect, device number 59 [ 312.263967][ T29] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 312.403989][ T29] usb 3-1: device descriptor read/64, error -71 [ 312.654437][ T29] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 312.669335][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.713925][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.722309][ T9273] ======================================================= [ 312.722309][ T9273] WARNING: The mand mount option has been deprecated and [ 312.722309][ T9273] and is ignored by this kernel. Remove the mand [ 312.722309][ T9273] option from the mount to silence this warning. [ 312.722309][ T9273] ======================================================= [ 312.814092][ T29] usb 3-1: device descriptor read/64, error -71 [ 312.867214][ T9273] fuse: Bad value for 'fd' [ 312.924045][ T5917] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 312.934492][ T29] usb usb3-port1: attempt power cycle [ 312.973754][ T9277] fuse: Bad value for 'fd' [ 313.186346][ T9279] loop2: detected capacity change from 0 to 7 [ 313.226598][ T5954] Dev loop2: unable to read RDB block 7 [ 313.278230][ T5954] loop2: AHDI p3 [ 313.282360][ T5954] loop2: partition table partially beyond EOD, truncated [ 313.319065][ T9279] Dev loop2: unable to read RDB block 7 [ 313.324886][ T29] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 313.342881][ T9279] loop2: AHDI p3 [ 313.350202][ T9279] loop2: partition table partially beyond EOD, truncated [ 313.375067][ T29] usb 3-1: device descriptor read/8, error -71 [ 313.634198][ T29] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 313.684821][ T29] usb 3-1: device descriptor read/8, error -71 [ 313.815393][ T29] usb usb3-port1: unable to enumerate USB device [ 313.964413][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.999249][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.034863][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.075907][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.115333][ T1217] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 314.144877][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.170703][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.179304][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.224961][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.303522][ T1217] usb 5-1: Using ep0 maxpacket: 32 [ 314.313203][ T1217] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 314.333847][ T1217] usb 5-1: config 0 has no interface number 0 [ 314.340032][ T1217] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.363476][ T1217] usb 5-1: config 0 interface 85 has no altsetting 0 [ 314.373912][ T1217] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 314.383164][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.403612][ T1217] usb 5-1: Product: syz [ 314.407865][ T1217] usb 5-1: Manufacturer: syz [ 314.412501][ T1217] usb 5-1: SerialNumber: syz [ 314.436006][ T1217] usb 5-1: config 0 descriptor?? [ 314.663529][ T1217] appletouch 5-1:0.85: Failed to read mode from device. [ 314.670854][ T1217] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 315.079412][ T1217] usb 5-1: USB disconnect, device number 47 [ 315.184349][ T9318] fuse: Bad value for 'fd' [ 315.234194][ T29] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 315.417328][ T29] usb 4-1: config 0 has no interfaces? [ 315.422900][ T29] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 315.437104][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.459460][ T29] usb 4-1: config 0 descriptor?? [ 315.543551][ T1217] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 315.673595][ T5885] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 315.686668][ T29] usb 4-1: string descriptor 0 read error: -71 [ 315.693753][ T1217] usb 3-1: Using ep0 maxpacket: 16 [ 315.704476][ T29] usb 4-1: USB disconnect, device number 62 [ 315.814262][ T1217] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.833982][ T1217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.868062][ T1217] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 315.908562][ T1217] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 315.917909][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 316.028189][ T1217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.038952][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.050740][ T5885] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 316.062419][ T1217] usb 3-1: config 0 descriptor?? [ 316.074486][ T9335] loop5: detected capacity change from 0 to 7 [ 316.083579][ T9335] Dev loop5: unable to read RDB block 7 [ 316.089486][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.094506][ T9335] loop5: unable to read partition table [ 316.115143][ T9335] loop5: partition table beyond EOD, truncated [ 316.131831][ T9335] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 316.153532][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 316.163829][ T5885] usb 1-1: config 0 descriptor?? [ 316.330006][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 316.349898][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 316.372984][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 316.402198][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 316.412590][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.423819][ T10] usb 5-1: Product: syz [ 316.445430][ T10] usb 5-1: Manufacturer: syz [ 316.452128][ T10] usb 5-1: SerialNumber: syz [ 316.464376][ T5885] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 316.487008][ T10] usb 5-1: config 0 descriptor?? [ 316.493933][ T9333] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 316.667022][ T5917] usb 1-1: USB disconnect, device number 61 [ 316.721932][ T9333] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 316.932417][ T1217] nintendo 0003:057E:2019.000F: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 316.945929][ C0] usb 3-1: input irq status -75 received [ 316.987805][ T9344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.004277][ T1217] nintendo 0003:057E:2019.000F: Failed to get joycon info; ret=-38 [ 317.063841][ T1217] nintendo 0003:057E:2019.000F: Failed to retrieve controller info; ret=-38 [ 317.073768][ T1217] nintendo 0003:057E:2019.000F: Failed to initialize controller; ret=-38 [ 317.089827][ T1217] nintendo 0003:057E:2019.000F: probe - fail = -38 [ 317.096910][ T1217] nintendo 0003:057E:2019.000F: probe with driver nintendo failed with error -38 [ 317.129875][ T9321] l2tp_ppp: sess 2/0: no socket in recv [ 317.206731][ T1217] usb 3-1: USB disconnect, device number 63 [ 317.377838][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.391040][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.517147][ T9347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.973'. [ 319.076707][ T1217] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 319.284529][ T1217] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 319.312306][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.326606][ T1217] usb 1-1: Product: syz [ 319.337736][ T1217] usb 1-1: Manufacturer: syz [ 319.353236][ T1217] usb 1-1: SerialNumber: syz [ 319.377373][ T1217] usb 1-1: config 0 descriptor?? [ 319.489386][ T9370] netlink: 48 bytes leftover after parsing attributes in process `syz.1.979'. [ 319.525407][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 319.535475][ T9371] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 319.549895][ T9370] netlink: 48 bytes leftover after parsing attributes in process `syz.1.979'. [ 319.626099][ T9373] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 319.732473][ T5885] usb 5-1: USB disconnect, device number 48 [ 319.802409][ T9363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.840339][ T9363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.989113][ T1217] usb 1-1: Firmware version (0.0) predates our first public release. [ 320.008402][ T1217] usb 1-1: Please update to version 0.2 or newer [ 320.030752][ T9379] loop5: detected capacity change from 0 to 7 [ 320.086120][ T9379] Dev loop5: unable to read RDB block 7 [ 320.108837][ T9379] loop5: unable to read partition table [ 320.133775][ T9379] loop5: partition table beyond EOD, truncated [ 320.148671][ T1217] usb 1-1: USB disconnect, device number 62 [ 320.183618][ T9379] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 320.827624][ T9394] loop5: detected capacity change from 0 to 7 [ 320.893203][ T9394] Dev loop5: unable to read RDB block 7 [ 320.920903][ T9394] loop5: unable to read partition table [ 320.947657][ T9394] loop5: partition table beyond EOD, truncated [ 320.977787][ T9394] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 321.163527][ T1217] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 321.333743][ T1217] usb 1-1: Using ep0 maxpacket: 16 [ 321.344304][ T1217] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.370662][ T1217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.398712][ T1217] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 321.412779][ T1217] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 321.422332][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.435817][ T1217] usb 1-1: config 0 descriptor?? [ 321.551484][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.560581][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.577044][ T9414] netlink: 52 bytes leftover after parsing attributes in process `syz.1.989'. [ 321.672255][ T9415] netlink: 72 bytes leftover after parsing attributes in process `syz.2.990'. [ 321.937540][ T9422] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 321.976416][ T1217] nintendo 0003:057E:2019.0010: unknown main item tag 0x0 [ 321.999012][ T1217] nintendo 0003:057E:2019.0010: unknown main item tag 0x0 [ 322.045404][ T1217] nintendo 0003:057E:2019.0010: unknown main item tag 0x0 [ 322.064797][ T9426] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 322.100120][ T1217] nintendo 0003:057E:2019.0010: unknown main item tag 0x0 [ 322.370007][ T5885] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 322.403326][ T1217] nintendo 0003:057E:2019.0010: unknown main item tag 0x0 [ 322.415929][ T1217] nintendo 0003:057E:2019.0010: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 322.496874][ T1217] nintendo 0003:057E:2019.0010: Failed to get joycon info; ret=-38 [ 322.514238][ T1217] nintendo 0003:057E:2019.0010: Failed to retrieve controller info; ret=-38 [ 322.550306][ T1217] nintendo 0003:057E:2019.0010: Failed to initialize controller; ret=-38 [ 322.593958][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 322.607329][ T5885] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 322.627897][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.637386][ T1217] nintendo 0003:057E:2019.0010: probe - fail = -38 [ 322.719412][ T1217] nintendo 0003:057E:2019.0010: probe with driver nintendo failed with error -38 [ 322.841253][ T5885] usb 5-1: config 0 descriptor?? [ 322.874539][ T1217] usb 1-1: USB disconnect, device number 63 [ 322.895163][ T5885] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 323.016595][ T9431] loop5: detected capacity change from 0 to 7 [ 323.029591][ T9431] Dev loop5: unable to read RDB block 7 [ 323.045159][ T9431] loop5: unable to read partition table [ 323.061376][ T9431] loop5: partition table beyond EOD, truncated [ 323.204150][ T9431] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 323.613743][ T5885] gspca_vc032x: reg_w err -110 [ 323.618851][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.626603][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.632958][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.662526][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.677836][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.995'. [ 323.707927][ T9435] geneve2: entered promiscuous mode [ 323.725171][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.738660][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.749590][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.761590][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.775104][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.803277][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.815323][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.832455][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.028423][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.040254][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.108106][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.131219][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.136770][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.143032][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.149021][ T5885] gspca_vc032x: Unknown sensor... [ 324.156144][ T5885] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 324.349671][ T9443] loop5: detected capacity change from 0 to 7 [ 324.373088][ T9443] Dev loop5: unable to read RDB block 7 [ 324.417880][ T9443] loop5: unable to read partition table [ 324.436420][ T9443] loop5: partition table beyond EOD, truncated [ 324.452158][ T9443] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 324.712751][ T9453] loop2: detected capacity change from 0 to 7 [ 324.772304][ T9453] Dev loop2: unable to read RDB block 7 [ 324.792437][ T9453] loop2: unable to read partition table [ 324.820959][ T9453] loop2: partition table beyond EOD, truncated [ 324.831042][ T9453] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 324.984179][ T29] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 325.087015][ T9459] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 325.134336][ T9459] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 325.145584][ T29] usb 1-1: config 0 has no interfaces? [ 325.154489][ T29] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 325.166796][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.180623][ T29] usb 1-1: Product: syz [ 325.189199][ T29] usb 1-1: Manufacturer: syz [ 325.194831][ T29] usb 1-1: SerialNumber: syz [ 325.243137][ T29] usb 1-1: config 0 descriptor?? [ 325.306636][ T5885] usb 5-1: USB disconnect, device number 49 [ 325.479383][ T9463] FAULT_INJECTION: forcing a failure. [ 325.479383][ T9463] name failslab, interval 1, probability 0, space 0, times 0 [ 325.536623][ T9463] CPU: 0 UID: 0 PID: 9463 Comm: syz.2.1008 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.536658][ T9463] Tainted: [L]=SOFTLOCKUP [ 325.536666][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.536678][ T9463] Call Trace: [ 325.536687][ T9463] [ 325.536697][ T9463] dump_stack_lvl+0xe8/0x150 [ 325.536733][ T9463] should_fail_ex+0x412/0x560 [ 325.536769][ T9463] should_failslab+0xa8/0x100 [ 325.536799][ T9463] __kmalloc_noprof+0xe8/0x760 [ 325.536820][ T9463] ? io_complete_rw+0x299/0x370 [ 325.536844][ T9463] ? io_cache_alloc_new+0x40/0x100 [ 325.536881][ T9463] io_cache_alloc_new+0x40/0x100 [ 325.536913][ T9463] __io_prep_rw+0x2bd/0xed0 [ 325.536944][ T9463] ? __pfx___io_prep_rw+0x10/0x10 [ 325.536969][ T9463] ? __pfx_io_write+0x10/0x10 [ 325.536999][ T9463] io_prep_rwv+0x8e/0x440 [ 325.537019][ T9463] ? __io_issue_sqe+0x1f7/0x4b0 [ 325.537040][ T9463] ? __pfx_io_prep_rwv+0x10/0x10 [ 325.537063][ T9463] ? io_issue_sqe+0x40f/0xf90 [ 325.537085][ T9463] ? __asan_memset+0x22/0x50 [ 325.537111][ T9463] io_submit_sqes+0xb6d/0x2400 [ 325.537175][ T9463] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 325.537200][ T9463] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 325.537392][ T9463] ? __fget_files+0x3a0/0x420 [ 325.537430][ T9463] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 325.537463][ T9463] ? fput+0xa0/0xd0 [ 325.537493][ T9463] ? ksys_write+0x242/0x270 [ 325.537518][ T9463] ? __pfx_ksys_write+0x10/0x10 [ 325.537547][ T9463] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 325.537573][ T9463] do_syscall_64+0x14d/0xf80 [ 325.537597][ T9463] ? trace_irq_disable+0x3b/0x150 [ 325.537628][ T9463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.537650][ T9463] ? clear_bhb_loop+0x40/0x90 [ 325.537676][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.537698][ T9463] RIP: 0033:0x7f53a099c799 [ 325.537718][ T9463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.537737][ T9463] RSP: 002b:00007f53a1814028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 325.537760][ T9463] RAX: ffffffffffffffda RBX: 00007f53a0c15fa0 RCX: 00007f53a099c799 [ 325.537776][ T9463] RDX: 0000000020000000 RSI: 00000000000020a0 RDI: 0000000000000004 [ 325.537789][ T9463] RBP: 00007f53a1814090 R08: 0000000000000000 R09: 0000000000000000 [ 325.537802][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.537814][ T9463] R13: 00007f53a0c16038 R14: 00007f53a0c15fa0 R15: 00007f53a0d3fa48 [ 325.537847][ T9463] [ 325.886065][ T9467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.925458][ T9467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.091452][ T9469] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1011'. [ 326.744647][ T9480] fuse: Unknown parameter 'fÛ 0x0000000000000004' [ 326.754064][ T5917] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 326.791482][ T9479] fuse: Unknown parameter 'fÛ 0x0000000000000004' [ 326.842153][ T9485] loop2: detected capacity change from 0 to 7 [ 326.877265][ T9485] Dev loop2: unable to read RDB block 7 [ 326.882949][ T9485] loop2: unable to read partition table [ 326.933226][ T9485] loop2: partition table beyond EOD, truncated [ 326.951503][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.969725][ T5917] usb 3-1: config 0 has an invalid interface number: 158 but max is 1 [ 326.983562][ T5917] usb 3-1: config 0 has an invalid interface number: 239 but max is 1 [ 326.991803][ T5917] usb 3-1: config 0 has no interface number 0 [ 327.014953][ T9485] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 327.047551][ T5917] usb 3-1: config 0 has no interface number 1 [ 327.058601][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.080900][ T5917] usb 3-1: config 0 interface 158 has no altsetting 0 [ 327.101263][ T5917] usb 3-1: config 0 interface 239 has no altsetting 0 [ 327.184882][ T5917] usb 3-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice= 3.d9 [ 327.194800][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.202957][ T5917] usb 3-1: Product: syz [ 327.207864][ T5917] usb 3-1: Manufacturer: syz [ 327.212522][ T5917] usb 3-1: SerialNumber: syz [ 327.228452][ T5917] usb 3-1: config 0 descriptor?? [ 327.351965][ T9491] loop2: detected capacity change from 0 to 7 [ 327.375001][ T9491] Dev loop2: unable to read RDB block 7 [ 327.394543][ T9491] loop2: unable to read partition table [ 327.412134][ T9491] loop2: partition table beyond EOD, truncated [ 327.434473][ T9491] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 327.779696][ T29] usb 1-1: USB disconnect, device number 64 [ 329.713548][ T5885] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 329.745267][ T5917] usb 3-1: bad CDC descriptors [ 329.779777][ T5917] usb 3-1: USB disconnect, device number 64 [ 329.954031][ T5885] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 329.972316][ T5885] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 329.992205][ T5885] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 330.040335][ T5885] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 330.067684][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 330.092615][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 330.152489][ T5885] usb 1-1: string descriptor 0 read error: -22 [ 330.159335][ T5885] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 330.202823][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.260288][ T5885] usb 1-1: config 0 descriptor?? [ 330.287801][ T9511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 330.313012][ T5885] hub 1-1:0.0: bad descriptor, ignoring hub [ 330.352260][ T5885] hub 1-1:0.0: probe with driver hub failed with error -5 [ 330.445865][ T5885] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 330.499533][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.548812][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.713497][ T5885] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 330.803625][ T1217] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 330.863566][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 330.871991][ T5885] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 330.882860][ T5885] usb 3-1: config 0 has no interface number 0 [ 330.895264][ T5885] usb 3-1: too many endpoints for config 0 interface 230 altsetting 133: 149, using maximum allowed: 30 [ 330.933654][ T5885] usb 3-1: config 0 interface 230 altsetting 133 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 330.956185][ T9534] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1024'. [ 330.961514][ T5885] usb 3-1: config 0 interface 230 has no altsetting 0 [ 330.975680][ T5885] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 330.985026][ T9534] openvswitch: netlink: Missing key (keys=40, expected=100) [ 330.986149][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.003800][ T5885] usb 3-1: Product: syz [ 331.004037][ T1217] usb 5-1: config 0 has no interfaces? [ 331.009208][ T9534] fuse: Unknown parameter 'n¯5.nšfd' [ 331.044608][ T5885] usb 3-1: Manufacturer: syz [ 331.049365][ T5885] usb 3-1: SerialNumber: syz [ 331.057509][ T1217] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 331.067121][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.076551][ T5885] usb 3-1: config 0 descriptor?? [ 331.081962][ T1217] usb 5-1: Product: syz [ 331.086778][ T1217] usb 5-1: Manufacturer: syz [ 331.092374][ T1217] usb 5-1: SerialNumber: syz [ 331.100306][ T1217] usb 5-1: config 0 descriptor?? [ 331.284753][ T1217] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 331.295911][ T9529] random: crng reseeded on system resumption [ 331.339422][ T9] usb 5-1: USB disconnect, device number 50 [ 331.464685][ T1217] usb 4-1: Invalid ep0 maxpacket: 32 [ 331.513152][ T9537] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1030'. [ 331.615631][ T1217] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 331.649234][ T9543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.784085][ T1217] usb 4-1: Invalid ep0 maxpacket: 32 [ 331.794572][ T1217] usb usb4-port1: attempt power cycle [ 332.213515][ T1217] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 332.234426][ T1217] usb 4-1: Invalid ep0 maxpacket: 32 [ 332.383835][ T1217] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 332.414564][ T1217] usb 4-1: Invalid ep0 maxpacket: 32 [ 332.423099][ T1217] usb usb4-port1: unable to enumerate USB device [ 332.509724][ T1217] usb 1-1: USB disconnect, device number 65 [ 332.759220][ T9547] loop5: detected capacity change from 0 to 7 [ 332.771241][ T9547] loop5: [ 332.775434][ T9547] loop5: partition table partially beyond EOD, truncated [ 333.290173][ T9557] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 333.384130][ T5917] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 333.493188][ T5885] as10x_usb: device has been detected [ 333.504030][ T5885] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 333.568009][ T5885] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 333.598011][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.634095][ T5917] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 333.662889][ T9563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.695534][ T5885] as10x_usb: error during firmware upload part1 [ 333.711183][ T5885] Registered device Sky IT Digital Key (green led) [ 333.712601][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.738317][ T5885] usb 3-1: USB disconnect, device number 65 [ 333.744641][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.760460][ T5917] usb 1-1: Product: syz [ 333.773217][ T9563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1041'. [ 333.791722][ T5917] usb 1-1: Manufacturer: syz [ 333.815648][ T5917] usb 1-1: SerialNumber: syz [ 333.826139][ T5885] Unregistered device Sky IT Digital Key (green led) [ 333.831544][ T5885] as10x_usb: device has been disconnected [ 334.063130][ T9554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.712350][ T9582] loop5: detected capacity change from 0 to 7 [ 334.723258][ T9554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.737238][ T9582] loop5: [ 334.754589][ T9582] loop5: partition table partially beyond EOD, truncated [ 334.901169][ T5928] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 334.969112][ T5917] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 334.977756][ T5917] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 334.997968][ T5917] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 335.044696][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1048'. [ 335.085747][ T5928] usb 3-1: device descriptor read/64, error -71 [ 335.338417][ T5928] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 335.435892][ T5917] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 335.463271][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 335.476567][ T5928] usb 3-1: device descriptor read/64, error -71 [ 335.549003][ T9591] tipc: Started in network mode [ 335.643919][ T5928] usb usb3-port1: attempt power cycle [ 335.667625][ T9591] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 335.720222][ T9591] tipc: Enabling of bearer rejected, failed to enable media [ 335.830036][ T9593] overlayfs: missing 'lowerdir' [ 335.894796][ T5917] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 335.985311][ T5928] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 336.020256][ T5917] usb 1-1: USB disconnect, device number 66 [ 336.046345][ T5917] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 336.065598][ T5928] usb 3-1: device descriptor read/8, error -71 [ 336.229613][ T9602] fuse: Unknown parameter '0x00000000000000040x0000000000000011' [ 336.364163][ T5928] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 336.386079][ T5928] usb 3-1: device descriptor read/8, error -71 [ 336.504520][ T5928] usb usb3-port1: unable to enumerate USB device [ 337.230130][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.240264][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.575467][ T9609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.440531][ T9629] loop2: detected capacity change from 0 to 7 [ 338.464853][ T9629] Dev loop2: unable to read RDB block 7 [ 338.470498][ T9629] loop2: unable to read partition table [ 338.494686][ T9629] loop2: partition table beyond EOD, truncated [ 338.517795][ T9629] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 338.814278][ T5928] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 338.984566][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 338.991930][ T5928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 339.004012][ T5917] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 339.012566][ T5928] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 339.022920][ T5928] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 339.041345][ T5928] usb 5-1: Product: syz [ 339.089218][ T5928] usb 5-1: Manufacturer: syz [ 339.094921][ T5928] usb 5-1: SerialNumber: syz [ 339.186391][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 339.201207][ T5917] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 339.217323][ T5917] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 339.227354][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.250900][ T5917] usb 1-1: Product: syz [ 339.310260][ T5917] usb 1-1: Manufacturer: syz [ 339.336089][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.346792][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.361239][ T5917] usb 1-1: SerialNumber: syz [ 339.417230][ T5928] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 339.444159][ T5928] visor 5-1:1.0: probe with driver visor failed with error -110 [ 339.593539][ T5885] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 339.766340][ T5885] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.791073][ T5917] usb 1-1: USB disconnect, device number 67 [ 339.793548][ T5885] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.838145][ T5885] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.872450][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.911366][ T9645] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 339.942281][ T5885] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.249504][ T5917] usb 4-1: USB disconnect, device number 67 [ 341.746979][ T5917] usb 5-1: USB disconnect, device number 51 [ 342.725725][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 342.849979][ T9678] binder: 9672:9678 ioctl c0306201 200000001a80 returned -14 [ 342.885015][ T9677] binder: 9672:9677 ioctl c0306201 200000001a80 returned -14 [ 342.982868][ T9683] loop5: detected capacity change from 0 to 7 [ 342.995369][ T9683] loop5: [ 342.998630][ T9683] loop5: partition table partially beyond EOD, truncated [ 343.237185][ T9688] tipc: Started in network mode [ 343.242247][ T9688] tipc: Node identity 7f000001, cluster identity 4711 [ 343.250769][ T9688] tipc: Enabling of bearer rejected, failed to enable media [ 343.726682][ T29] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 344.051459][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 344.064956][ T29] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 344.194165][ T29] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 344.238010][ T29] usb 3-1: config 1 interface 0 has no altsetting 0 [ 344.927710][ T29] usb 3-1: New USB device found, idVendor=05c6, idProduct=920d, bcdDevice=e5.23 [ 344.937510][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.953554][ T29] usb 3-1: Product: syz [ 344.963958][ T29] usb 3-1: Manufacturer: syz [ 344.974135][ T29] usb 3-1: SerialNumber: syz [ 345.077207][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1077'. [ 345.278845][ T29] usb 3-1: USB disconnect, device number 70 [ 346.133551][ T5885] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 346.245112][ T9720] loop5: detected capacity change from 0 to 7 [ 346.271282][ T5954] Dev loop5: unable to read RDB block 7 [ 346.294160][ T5954] loop5: unable to read partition table [ 346.313498][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 346.315411][ T5954] loop5: partition table beyond EOD, truncated [ 346.328094][ T5885] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 346.362824][ T9720] Dev loop5: unable to read RDB block 7 [ 346.369777][ T9720] loop5: unable to read partition table [ 346.379585][ T5885] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 346.407721][ T9720] loop5: partition table beyond EOD, truncated [ 346.426310][ T5885] usb 5-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 346.434812][ T9720] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 346.470100][ T5885] usb 5-1: Product: syz [ 346.504517][ T5885] usb 5-1: Manufacturer: syz [ 346.543296][ T5885] usb 5-1: SerialNumber: syz [ 346.588435][ T5885] r8152-cfgselector 5-1: Unknown version 0x0000 [ 346.601492][ T5885] r8152-cfgselector 5-1: config 0 descriptor?? [ 346.723999][ T9726] loop5: detected capacity change from 0 to 7 [ 346.750019][ T9726] loop5: [ 346.754174][ T9726] loop5: partition table partially beyond EOD, truncated [ 346.929894][ T5885] r8152-cfgselector 5-1: Needed 2 retries to read version [ 346.951050][ T5885] r8152-cfgselector 5-1: Unknown version 0x0000 [ 346.967459][ T5885] r8152-cfgselector 5-1: bad CDC descriptors [ 347.257502][ T5885] r8152-cfgselector 5-1: USB disconnect, device number 52 [ 347.416892][ T5928] IPVS: starting estimator thread 0... [ 347.613818][ T9756] IPVS: using max 26 ests per chain, 62400 per kthread [ 348.544087][ T29] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 348.684084][ T29] usb 5-1: device descriptor read/64, error -71 [ 348.734291][ T31] INFO: task kworker/0:5:5894 blocked for more than 143 seconds. [ 348.743969][ T31] Tainted: G L syzkaller #0 [ 348.750520][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.805736][ T31] task:kworker/0:5 state:D stack:20712 pid:5894 tgid:5894 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 348.858678][ T9762] loop2: detected capacity change from 0 to 7 [ 348.909166][ T9762] Dev loop2: unable to read RDB block 7 [ 348.918908][ T9762] loop2: unable to read partition table [ 348.926208][ T9762] loop2: partition table beyond EOD, truncated [ 348.932501][ T9762] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 348.973465][ T29] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 348.989118][ T31] Workqueue: usb_hub_wq hub_event [ 349.021866][ T31] Call Trace: [ 349.062881][ T31] [ 349.153995][ T31] __schedule+0x15dd/0x52d0 [ 349.272346][ T29] usb 5-1: device descriptor read/64, error -71 [ 349.313968][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 349.347442][ T31] ? device_initial_probe+0xa1/0xd0 [ 349.361350][ T31] ? device_add+0x7b6/0xb70 [ 349.394449][ T29] usb usb5-port1: attempt power cycle [ 349.401328][ T31] ? usb_set_configuration+0x1a87/0x2110 [ 349.420313][ T31] ? usb_generic_driver_probe+0x8d/0x150 [ 349.433530][ T31] ? __driver_probe_device+0x18c/0x320 [ 349.456178][ T31] ? bus_for_each_drv+0x258/0x2f0 [ 349.481703][ T31] ? hub_event+0x2a1c/0x4f30 [ 349.503006][ T31] ? process_scheduled_works+0xb6e/0x18c0 [ 349.529217][ T31] ? worker_thread+0xa53/0xfc0 [ 349.571599][ T31] ? kthread+0x388/0x470 [ 349.587692][ T31] ? ret_from_fork+0x51e/0xb90 [ 349.613445][ T31] ? __pfx___schedule+0x10/0x10 [ 349.638897][ T31] ? schedule+0x90/0x360 [ 349.663258][ T31] schedule+0x164/0x360 [ 349.676484][ T31] schedule_timeout+0xc3/0x2c0 [ 349.696880][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.710080][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 349.727179][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.734678][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.740115][ T31] ? wait_for_completion+0x274/0x5e0 [ 349.753967][ T31] wait_for_completion+0x2cc/0x5e0 [ 349.754004][ T29] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 349.759399][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 349.783998][ T31] i2c_del_adapter+0x5c0/0x790 [ 349.791833][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 349.798677][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 349.813892][ T31] ? dvb_usbv2_exit+0x935/0xb60 [ 349.821821][ T31] dvb_usbv2_probe+0x4c3/0x3d40 [ 349.826820][ T29] usb 5-1: device descriptor read/8, error -71 [ 349.838821][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 349.847757][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 349.854379][ T31] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 349.862915][ T31] usb_probe_interface+0x668/0xc90 [ 349.874191][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 349.881196][ T31] really_probe+0x267/0xaf0 [ 349.889737][ T31] __driver_probe_device+0x18c/0x320 [ 349.903594][ T31] driver_probe_device+0x4f/0x240 [ 349.908828][ T31] __device_attach_driver+0x279/0x430 [ 349.917388][ T31] bus_for_each_drv+0x258/0x2f0 [ 349.922508][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 349.935611][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 349.941180][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 349.953936][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 349.965724][ T31] __device_attach+0x2c5/0x450 [ 349.974001][ T31] ? __pfx___device_attach+0x10/0x10 [ 349.984026][ T31] ? _raw_spin_unlock+0x28/0x50 [ 349.989040][ T31] device_initial_probe+0xa1/0xd0 [ 349.998109][ T31] bus_probe_device+0x12a/0x220 [ 350.004005][ T31] ? device_add+0x726/0xb70 [ 350.008785][ T31] device_add+0x7b6/0xb70 [ 350.017738][ T31] usb_set_configuration+0x1a87/0x2110 [ 350.024074][ T31] usb_generic_driver_probe+0x8d/0x150 [ 350.029689][ T31] usb_probe_device+0x1c4/0x3b0 [ 350.039169][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 350.051805][ T31] really_probe+0x267/0xaf0 [ 350.063939][ T31] __driver_probe_device+0x18c/0x320 [ 350.063976][ T29] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 350.069916][ T31] driver_probe_device+0x4f/0x240 [ 350.090370][ T31] __device_attach_driver+0x279/0x430 [ 350.096722][ T31] bus_for_each_drv+0x258/0x2f0 [ 350.096806][ T29] usb 5-1: device descriptor read/8, error -71 [ 350.101938][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 350.122450][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 350.128362][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 350.133716][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 350.139618][ T31] __device_attach+0x2c5/0x450 [ 350.145540][ T31] ? __pfx___device_attach+0x10/0x10 [ 350.150894][ T31] ? _raw_spin_unlock+0x28/0x50 [ 350.155958][ T31] device_initial_probe+0xa1/0xd0 [ 350.161034][ T31] bus_probe_device+0x12a/0x220 [ 350.167802][ T31] ? device_add+0x726/0xb70 [ 350.172373][ T31] device_add+0x7b6/0xb70 [ 350.176812][ T31] usb_new_device+0xa08/0x16f0 [ 350.181632][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 350.186930][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.192263][ T31] hub_event+0x2a1c/0x4f30 [ 350.196897][ T31] ? __update_load_avg_cfs_rq+0x6f6/0xc10 [ 350.202707][ T31] ? __pfx_hub_event+0x10/0x10 [ 350.207657][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 350.213487][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 350.214296][ T29] usb usb5-port1: unable to enumerate USB device [ 350.219266][ T31] process_scheduled_works+0xb6e/0x18c0 [ 350.231254][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 350.237511][ T31] ? assign_work+0x3d5/0x5e0 [ 350.242156][ T31] worker_thread+0xa53/0xfc0 [ 350.247177][ T31] kthread+0x388/0x470 [ 350.251319][ T31] ? __pfx_worker_thread+0x10/0x10 [ 350.256909][ T31] ? __pfx_kthread+0x10/0x10 [ 350.261552][ T31] ret_from_fork+0x51e/0xb90 [ 350.266327][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 350.271489][ T31] ? __switch_to+0xc7d/0x1450 [ 350.276857][ T31] ? __pfx_kthread+0x10/0x10 [ 350.281504][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.286970][ T31] [ 350.290478][ T31] [ 350.290478][ T31] Showing all locks held in the system: [ 350.298491][ T31] 1 lock held by khungtaskd/31: [ 350.303535][ T31] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 350.313685][ T31] 2 locks held by getty/5583: [ 350.318413][ T31] #0: ffff88803596b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 350.328516][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 350.339342][ T31] 5 locks held by kworker/0:5/5894: [ 350.344754][ T31] #0: ffff8880222af148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 350.356302][ T31] #1: ffffc90004047c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 350.372463][ T31] #2: ffff8880298ae198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 350.381564][ T31] #3: ffff88807a094198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 350.392647][ T31] #4: ffff8880328bc160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 350.402130][ T31] 4 locks held by udevd/5963: [ 350.407245][ T31] #0: ffff8880304cdb08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 350.416208][ T31] #1: ffff88801baa9088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 350.425967][ T31] #2: ffff8880584a0968 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 350.435688][ T31] #3: ffff88807a094198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 350.445227][ T31] [ 350.447595][ T31] ============================================= [ 350.447595][ T31] [ 350.465725][ T31] NMI backtrace for cpu 0 [ 350.465746][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 350.465773][ T31] Tainted: [L]=SOFTLOCKUP [ 350.465779][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.465788][ T31] Call Trace: [ 350.465795][ T31] [ 350.465802][ T31] dump_stack_lvl+0xe8/0x150 [ 350.465828][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 350.465853][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 350.465875][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 350.465900][ T31] sys_info+0x135/0x170 [ 350.465919][ T31] watchdog+0xfd9/0x1030 [ 350.465947][ T31] ? watchdog+0x21a/0x1030 [ 350.465974][ T31] kthread+0x388/0x470 [ 350.465989][ T31] ? __pfx_watchdog+0x10/0x10 [ 350.466011][ T31] ? __pfx_kthread+0x10/0x10 [ 350.466029][ T31] ret_from_fork+0x51e/0xb90 [ 350.466051][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 350.466071][ T31] ? __switch_to+0xc7d/0x1450 [ 350.466099][ T31] ? __pfx_kthread+0x10/0x10 [ 350.466115][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.466148][ T31] [ 350.466154][ T31] Sending NMI from CPU 0 to CPUs 1: [ 350.583633][ C1] NMI backtrace for cpu 1 [ 350.583657][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.583682][ C1] Tainted: [L]=SOFTLOCKUP [ 350.583689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.583701][ C1] RIP: 0010:pie_calculate_probability+0x2e/0x7e0 [ 350.583732][ C1] Code: 55 41 57 41 56 41 55 41 54 53 48 83 ec 68 89 d5 49 89 f5 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 a7 d7 0f f8 48 89 5c 24 08 <4c> 8d 7b 1a 4c 89 f8 48 c1 e8 03 48 89 44 24 30 42 0f b6 04 30 84 [ 350.583749][ C1] RSP: 0018:ffffc90000a08b88 EFLAGS: 00000246 [ 350.583772][ C1] RAX: ffffffff89b5c959 RBX: ffff8880249f5ac0 RCX: ffff88801d6c8000 [ 350.583787][ C1] RDX: 0000000000000100 RSI: ffffc9001c8e9bc0 RDI: ffff8880249f5ac0 [ 350.583800][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 350.583811][ C1] R10: dffffc0000000000 R11: fffff52000141174 R12: 1ffff1100493eb5d [ 350.583825][ C1] R13: ffffc9001c8e9bc0 R14: dffffc0000000000 R15: ffffc9001c8e9bc0 [ 350.583840][ C1] FS: 0000000000000000(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 350.583855][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.583868][ C1] CR2: 0000200000404030 CR3: 0000000076250000 CR4: 00000000003526f0 [ 350.583884][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 350.583895][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 350.583913][ C1] Call Trace: [ 350.583922][ C1] [ 350.583938][ C1] fq_pie_timer+0x288/0x5b0 [ 350.583965][ C1] ? fq_pie_timer+0x4d/0x5b0 [ 350.583991][ C1] call_timer_fn+0x192/0x640 [ 350.584016][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 350.584040][ C1] ? call_timer_fn+0xd4/0x640 [ 350.584062][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 350.584091][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.584109][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 350.584134][ C1] __run_timer_base+0x652/0x8b0 [ 350.584155][ C1] ? ktime_get+0x45/0x200 [ 350.584178][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 350.584203][ C1] ? sched_clock_cpu+0x74/0x440 [ 350.584232][ C1] run_timer_softirq+0xb7/0x170 [ 350.584254][ C1] handle_softirqs+0x22a/0x870 [ 350.584281][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 350.584309][ C1] __irq_exit_rcu+0x5f/0x150 [ 350.584332][ C1] irq_exit_rcu+0x9/0x30 [ 350.584354][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 350.584382][ C1] [ 350.584388][ C1] [ 350.584395][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 350.584416][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 350.584441][ C1] Code: 6e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 c2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 350.584457][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 350.584472][ C1] RAX: 0000000000534635 RBX: ffffffff819a900a RCX: 0000000080000001 [ 350.584485][ C1] RDX: 0000000000000001 RSI: ffffffff8def7f2f RDI: ffffffff8c27c900 [ 350.584499][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 350.584513][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: 0000000000000001 [ 350.584526][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 1ffff11003ad9000 [ 350.584541][ C1] ? do_idle+0x36a/0x5f0 [ 350.584573][ C1] default_idle+0x9/0x20 [ 350.584595][ C1] default_idle_call+0x72/0xb0 [ 350.584618][ C1] do_idle+0x36a/0x5f0 [ 350.584642][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 350.584665][ C1] ? __pfx_do_idle+0x10/0x10 [ 350.584694][ C1] cpu_startup_entry+0x43/0x60 [ 350.584719][ C1] start_secondary+0x101/0x110 [ 350.584741][ C1] common_startup_64+0x13e/0x147 [ 350.584777][ C1] [ 350.952871][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 350.959764][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 350.970552][ T31] Tainted: [L]=SOFTLOCKUP [ 350.974894][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.985078][ T31] Call Trace: [ 350.988388][ T31] [ 350.991343][ T31] vpanic+0x56c/0xa60 [ 350.995368][ T31] ? __pfx___schedule+0x10/0x10 [ 351.000234][ T31] ? __pfx_vpanic+0x10/0x10 [ 351.004771][ T31] ? __pfx_console_unlock+0x10/0x10 [ 351.010026][ T31] panic+0xc5/0xd0 [ 351.013805][ T31] ? __pfx_panic+0x10/0x10 [ 351.018296][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 351.023712][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 351.029925][ T31] watchdog+0x1023/0x1030 [ 351.034306][ T31] ? watchdog+0x21a/0x1030 [ 351.038800][ T31] kthread+0x388/0x470 [ 351.042897][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.047604][ T31] ? __pfx_kthread+0x10/0x10 [ 351.052273][ T31] ret_from_fork+0x51e/0xb90 [ 351.056905][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.062053][ T31] ? __switch_to+0xc7d/0x1450 [ 351.066778][ T31] ? __pfx_kthread+0x10/0x10 [ 351.071389][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.076227][ T31] [ 351.079444][ T31] Kernel Offset: disabled [ 351.083793][ T31] Rebooting in 86400 seconds..