last executing test programs: 6.952134166s ago: executing program 1 (id=2075): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000001780)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000017c0)={0x43, 0x1, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001800)={0x43, 0x0, 0x1, 0x3}, 0x10) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000400)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000640)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000006c0)=0x90000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000700)={&(0x7f0000000740)=[0x2, 0x4, 0xfffffffa, 0x9, 0x1, 0x40, 0x935f, 0x8b, 0x0, 0x7, 0x7, 0x52d, 0x1, 0x7, 0x2, 0xa, 0x800000, 0x2, 0x8, 0xf, 0x8001, 0x0, 0xff, 0x5, 0x2, 0x3, 0x8, 0xc1, 0x7fffffff, 0x3, 0x5, 0x0, 0xf314, 0x551, 0x4, 0xd8f6, 0x5, 0x6, 0x1c33, 0x5, 0xe0c5, 0x0, 0x6, 0x38, 0x9, 0x46b, 0x1, 0x2, 0x6, 0x1, 0xff, 0x99e, 0xae8, 0x5, 0x8, 0x25, 0x2, 0x5, 0x8, 0xff, 0x2, 0x2, 0x81, 0x8, 0x9, 0xa, 0x1, 0xfffffff8, 0x0, 0x3, 0x1, 0x8, 0x1, 0x6, 0x1, 0x3f, 0x7, 0x10, 0x2ff, 0x8, 0x816a, 0x100, 0x6, 0x800, 0x8, 0x80, 0xfffff29a, 0x5, 0x1, 0x7, 0xf6d, 0x7, 0x3, 0x1, 0xe4b, 0x9, 0x81, 0x2, 0xf78, 0x7, 0x3, 0x1, 0x80000001, 0x2, 0xf, 0x4, 0x5, 0x5, 0x4, 0xf, 0x2, 0xf, 0xfffffff8, 0x3, 0x4, 0x9, 0x0, 0x7, 0xcf9, 0xfffffff7, 0x327, 0x2, 0x3, 0x8, 0x6, 0xffffffff, 0x6, 0x9, 0x4, 0x0, 0x22, 0xfffffffc, 0x9, 0x0, 0x4, 0x0, 0x2, 0x3, 0x5, 0x4, 0x7, 0x9, 0x0, 0x3, 0x7fff, 0x4, 0x2, 0x0, 0x80000000, 0x1, 0x7, 0x8, 0x8, 0xe9b8, 0x3, 0x7, 0x6507, 0x3, 0x800, 0x2, 0x80, 0x8, 0x0, 0x3, 0x9, 0xe3db, 0x4, 0x2000007, 0xbaba, 0xc3, 0x8, 0x0, 0x0, 0xf, 0xfffffffa, 0x1, 0xffffffff, 0x7f, 0x3, 0x3, 0xfffffffb, 0x0, 0x2c0, 0x3, 0x3, 0xfffffffc, 0x4, 0x9, 0x50d, 0x5, 0xccf, 0x2, 0xcd00, 0x4, 0x7fff, 0x7, 0xd, 0x221b, 0xffff289d, 0x2, 0x7ff, 0x4, 0x7, 0x7fff, 0x4, 0xf, 0x4521, 0x2, 0x0, 0x8, 0x546c, 0x4, 0x4, 0x2, 0x9, 0x4, 0xfff, 0x7ff, 0x3, 0x8d7, 0x4, 0x5, 0x2, 0xff, 0x8, 0x4, 0x5, 0x8, 0x5, 0x68e8d10f, 0x6, 0x4, 0x1, 0x7ff, 0xfff, 0x7, 0x5, 0x3, 0xffff, 0x7, 0x0, 0xfffffffe, 0x3, 0x1, 0x1, 0x7, 0x3ff, 0x1, 0xab3b, 0xf, 0x7fffffff, 0x7f, 0x6, 0x2, 0x6, 0x6, 0x1, 0xf, 0x6, 0x7fffffff, 0x230, 0x5, 0x800, 0xf, 0x6, 0xfffffffb, 0x3, 0x5, 0x3, 0xe1, 0x3ff, 0x8000, 0x5, 0xfffffffc, 0x7, 0x2, 0xfffff851, 0x3, 0x4, 0x401, 0x401, 0xa, 0x5, 0x7, 0x9, 0xfffffff7, 0x3, 0x10, 0x4, 0x400, 0x4, 0x6, 0x3, 0x401, 0x3, 0xcc5, 0x3, 0x9, 0x7, 0x3, 0x8bf3, 0xb, 0x4, 0x3, 0x306d, 0x6, 0x10001, 0x4, 0x4, 0x4, 0xfffffff9, 0xe, 0xffff8000, 0x5b8, 0x5, 0x3, 0x2, 0x7fffffff, 0x1, 0x4, 0x0, 0x9, 0x7, 0x9, 0x8, 0xfffffff8, 0x5, 0xbda7, 0x800, 0x8, 0x2, 0x2dd7, 0x4, 0x3012c672, 0x10001, 0xff, 0xd8, 0xd, 0x3, 0xfff, 0x7, 0x8, 0x400, 0x6, 0x6cf, 0x4b1ff6f, 0x3, 0x0, 0x0, 0x1, 0x2, 0x6, 0x9, 0x2, 0x8, 0xc1, 0x4, 0x6, 0x8, 0x3ff, 0x5, 0x6, 0x20a, 0x2, 0x9, 0x9, 0x5, 0xe, 0x40, 0x2, 0x7, 0x20000000, 0x6, 0x738, 0x200, 0x2, 0x6f1, 0x6, 0x9, 0x9, 0x4, 0xffffff80, 0x9, 0x6, 0x5, 0x9, 0x8001, 0x1, 0x8, 0x400, 0xfffff15d, 0xbb, 0x8, 0x2a, 0xffffffff, 0x1000000, 0x6, 0x6, 0x8001, 0x1, 0x72, 0x4, 0x2, 0x2, 0xfffffff8, 0x0, 0x3, 0x5, 0x4, 0x7, 0x2, 0x8, 0x6, 0x8, 0x8, 0x13f, 0x40, 0x5, 0xf2, 0x101, 0x0, 0x3ff, 0xa, 0x4, 0x5, 0x3, 0x1, 0xfffff77a, 0x1, 0x101, 0x0, 0x0, 0x6, 0x3, 0x9, 0x10, 0x4, 0xc, 0x40, 0x7f, 0x835, 0x7, 0x7, 0x9, 0x2, 0x9, 0xffffffff, 0x401, 0x5, 0x4, 0x7fff, 0xffff, 0x3, 0xfffffffc, 0x6, 0xc32, 0x8000, 0x5, 0x1, 0xdca0, 0x5, 0x1, 0x4, 0x7f, 0x7, 0xfffffff9, 0x0, 0x403, 0x8, 0x4, 0xfffff000, 0x5, 0x172, 0xc5, 0x3, 0x7, 0x9, 0x1000, 0x6, 0x0, 0xfffffffe, 0x3ff, 0x4, 0x2, 0x0, 0x7ff, 0x1000, 0x5, 0xb6, 0x7, 0x61e0, 0x1, 0x2, 0x4, 0x7fff, 0xfffffff7, 0x1, 0x40, 0x800, 0xff, 0x40, 0x1, 0x4, 0xfffffffb, 0x7, 0x3, 0x8001, 0x9, 0x7, 0x0, 0x961a, 0xc17, 0x8000, 0x0, 0x2, 0x9, 0x7fffffff, 0x7f, 0x5, 0x5, 0x0, 0x1, 0x10001, 0xb, 0x10000, 0x80000001, 0x4007ff, 0x2, 0x3, 0x7, 0x6, 0x7, 0x1ff, 0x8, 0x400, 0x9, 0x87, 0x2, 0x0, 0x5, 0xa0d, 0x1ff, 0xf2, 0x1, 0x7, 0x4, 0x7, 0x3, 0x5, 0x4, 0x1, 0x7fff, 0x6, 0xfffffffc, 0x5, 0x8, 0xfffff145, 0x1, 0x0, 0xcaa, 0x9, 0x9, 0x8, 0x6, 0x8, 0x4, 0x0, 0x3, 0x3, 0x0, 0x8, 0x7, 0xed, 0x2, 0x1000, 0xa, 0xb4d, 0x5, 0x4, 0xfffffff8, 0x3, 0x8, 0x9, 0x3789, 0x4, 0x6, 0x9, 0x9, 0x9, 0xd4, 0x8, 0x3, 0x80000000, 0x10000, 0x5, 0x80000001, 0x6, 0x3, 0x90, 0x9, 0x73, 0x3, 0x4, 0x9, 0x4, 0x5, 0xb, 0x8be, 0x0, 0x5, 0x1e, 0x7fff, 0x9, 0x3, 0x66a4, 0x4, 0x668, 0x9df, 0x0, 0x6, 0x1ff, 0x10000, 0x5, 0x2, 0x401, 0x200, 0x1, 0x3, 0x4, 0xe5a, 0x7, 0x5, 0x9, 0xfffff73e, 0x4, 0x3, 0xe, 0x6, 0x2, 0xc, 0x3, 0x2, 0x100, 0x8, 0x80, 0x6, 0x4, 0x5, 0x6000000, 0xfffffffa, 0x1d8, 0x6, 0x0, 0x3, 0x9, 0x4, 0xcad, 0x200, 0x1, 0x0, 0x6, 0x200, 0x2, 0xfff, 0x8, 0x3, 0x7, 0x0, 0x8, 0x80000000, 0x6e9, 0x4, 0x6, 0x800, 0x5, 0x8, 0x6, 0x24b, 0xc0, 0x4, 0xfff, 0x8, 0x7fffffff, 0x6, 0xa78, 0x3, 0x8, 0x80000000, 0x5c3, 0x3, 0x9, 0x6, 0x69, 0x4, 0x2, 0x1, 0x401, 0x9, 0x6, 0x5, 0x7f, 0x0, 0xef, 0x8, 0x401, 0xf, 0x4, 0x4, 0x7, 0x6, 0x0, 0x10, 0x7, 0x69c, 0x5c0, 0xffffff11, 0xd, 0x7, 0x10, 0x0, 0x8, 0x0, 0xffffffff, 0xfffffff9, 0x4, 0x5, 0x6, 0x7, 0x79d5, 0x200, 0xf, 0x100, 0x41e, 0xffffff99, 0x7c, 0x5, 0x2, 0xfffffff8, 0xd, 0x9, 0xff, 0x0, 0x2, 0x6, 0x0, 0xfffff83d, 0x0, 0x9, 0x200, 0x5d92, 0x6, 0x4, 0x1000, 0x8, 0xfffffff9, 0x3, 0x62, 0x1, 0x46f, 0x4, 0x2, 0xfffffffb, 0x800, 0xd, 0x3, 0x8, 0x4, 0x2, 0x200, 0xebf1, 0x97ca, 0x8, 0xa, 0x2, 0x7, 0x8, 0xc2, 0xff, 0x8, 0x5b, 0x40000, 0x0, 0x2, 0x1, 0x4fe9, 0x3, 0x1, 0x80000001, 0x7d, 0xff, 0x5, 0xfffffff8, 0x7, 0x80f, 0x40, 0x91f, 0x6, 0x8, 0x8, 0xfffff5c3, 0x6, 0x3268, 0x9, 0x7, 0x5, 0x10, 0x4, 0x2f2f2cfb, 0x3, 0x8000, 0xdb21, 0xfffffffd, 0x3, 0x1000, 0x2, 0xff, 0x2, 0x10001, 0x2, 0x8b, 0x9, 0x2786, 0xffffffff, 0x5, 0x3, 0x10, 0x5, 0x10001, 0xba000000, 0x1, 0x7, 0x7fffffff, 0x9f, 0x2, 0xed, 0x1, 0x80000000, 0x74e, 0x6, 0xffffffff, 0x2, 0xb, 0x2, 0x4, 0x9, 0x2, 0x6, 0x0, 0x200, 0x9, 0xbece, 0x8, 0x3, 0x1, 0xd, 0x5, 0x3, 0x4, 0xac30, 0x6, 0x91, 0x0, 0x600000, 0x7, 0x10a, 0x1000005, 0x3ff, 0x10000, 0x4, 0x9, 0x2, 0x0, 0x209, 0x8bf5, 0x0, 0x4, 0x8, 0xfffffffb, 0x400, 0xfffffe00, 0x9, 0x5, 0x0, 0x3, 0x6, 0x7, 0x4, 0xf, 0x2, 0x4, 0xfffff48c, 0x1ff, 0xe, 0x34, 0x4, 0x4, 0x1, 0x8000, 0x7, 0x160f, 0x0, 0x1, 0x2, 0x7, 0x81, 0x8, 0x4, 0x6, 0x0, 0xfffffff7, 0x2, 0x32, 0x3, 0x6, 0x4, 0x0, 0x800, 0x0, 0x9, 0x0, 0x1, 0x4, 0x9, 0x9, 0x1, 0x3, 0x7, 0x7, 0x2, 0x10, 0x7fff, 0x7, 0x9, 0x2, 0x25, 0xffff0000, 0x3ff, 0x4, 0x502e, 0x5, 0x8, 0x1, 0x4, 0xfffffffb, 0x80, 0x0, 0x1, 0x5, 0x7, 0x3ff, 0x6, 0x7, 0x0, 0x0, 0x3, 0xffffffff, 0x7, 0x3, 0x2, 0xfffffffa, 0x5, 0x4, 0xcf, 0xfffffff8, 0xffb, 0x7, 0x8, 0x10000, 0x80000000, 0x5, 0x5, 0x2f, 0x5, 0x1, 0x4245, 0x8, 0x7ff, 0x3, 0x8, 0x40, 0x5, 0x7, 0x8, 0x1, 0x0, 0x9, 0x2, 0x4, 0x3, 0x9, 0x1, 0x1000, 0x80000000, 0x2, 0x0, 0x7, 0x40000000, 0x9, 0xfff, 0xa, 0x4, 0x1, 0x1, 0x7, 0x1ff, 0x8, 0x3, 0x6, 0x5, 0x8001, 0x0, 0x92f2, 0x1, 0x5, 0x7, 0x0, 0x10001, 0x40000, 0x7, 0x40, 0xff, 0x5, 0xcacd, 0x9], 0x1, 0x400, 0x8}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000001740)={@hyper}) close(r4) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0014000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a29045bace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9d428d9ab6fd1364c3871e66b30dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9", 0xd9}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0409234e833fa1a2d84195dc306c33d0384b92380e2683aea212a4b385e2c01a0e44054175b333fc6b967c96e8a84d64a89f2352ecb41d4ed9e4e4beae5c65d277", 0x41}], 0x1}, 0xf951267963850f86) syz_usb_control_io$hid(r10, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 6.677120359s ago: executing program 4 (id=2080): ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/4095, 0x440000}], 0x100000000000011a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write(r0, &(0x7f0000000100)="16189d92f3bb41080500a2", 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000017c0)}], 0x1, 0x0, 0x18}, 0x8841) poll(&(0x7f0000001840), 0x20000000000000b5, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x204000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001880)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000002a00)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x8, 0x6}, 0x1, 0x81}, [{0x2, 0x9c, 0x84, 0x72, 0xfffffcd6, 0x7}, {0x1, 0x6, 0x0, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x88, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x2, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x9, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x48}, {0x41, 0x10000, 0x5, 0x4, 0x9, 0x108000}, {0x4, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e9, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768a, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0xa}, {0xfffffffb, 0x7, 0xfffffffa, 0x3, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0x9, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x1, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x0, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x7, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x5, 0xd, 0x101, 0xb, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0xd, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x100, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x4, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x8, 0x1ff, 0x7, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xffe, 0xffffff13, 0x80000009, 0x6, 0x6}, {0xfffffffe, 0x6, 0xe1, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0xa001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x0, 0x3, 0x8, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x1, 0x0, 0xffffff81, 0x1}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x103, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc8, 0x4, 0xb, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x4000007f}, {0xefa, 0x6, 0x7f, 0x2, 0xfffffffe, 0xb}, {0x4, 0x4b, 0x0, 0x3a, 0x7f, 0x7ff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d6, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x1}, {0x6, 0x7, 0x8, 0x8, 0x9, 0x80000000}, {0xfffffff9, 0xcce, 0x6, 0x6, 0x9, 0x1}, {0xfffffffd, 0xc, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x3}, {0x1, 0x2d6f, 0x400, 0xe408, 0x9f17, 0xffffff7f}, {0xfff, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x9, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x400008, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xfffffff9, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x6, 0x6, 0x3, 0x100, 0x4}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x8, 0x3, 0x7e8, 0x7, 0x9}, {0x1, 0x7, 0x5, 0xb, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff2, 0x3ff, 0x102, 0x4}, {0x3, 0x9, 0x0, 0xed5, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x2, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x3, 0x5, 0xffffff01, 0x8}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x802, 0x9, 0x8, 0x6, 0x100}, {0x81, 0x4, 0x988, 0x7, 0x1, 0x7}, {0xdc03, 0x7, 0x402c, 0x4, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x400001ff, 0x1ff, 0xc1b9}, {0xa24b, 0x947d, 0x42, 0x4, 0x9, 0x1fe}, {0x0, 0x401, 0xa89, 0x5ef, 0x6, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xbac, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x8, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x1, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x11, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x9, 0x4, 0xf, 0x2}, {0xfe, 0x1, 0xffffffff, 0xffffffff, 0x8, 0x74}, {0x404, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x2, 0x2}, {0x6, 0x80000000, 0xa, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0xfffffffd}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0xffc}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x0, 0x745e81639ff0f356}, {0x4}, {0x5, 0x1}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x6}, {0x1}, {0x2}, {0x3}, {0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 2) 6.412405463s ago: executing program 4 (id=2081): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000940)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)="c955a2104c63421f77708990a420494d355d4e2c1e097af5eb16f17cd356084e07d427b237e70c94836080ce377e9c2cbb729ba3223621585e41eeb52e8e7bcb52cbfad4e934f9a2342ad3d16d36a6ab56cbd3d3b3ba43f98f5d20c143c0dc7b0087ac09dc58276e2e5fd81518b0b23e25f76183b6", &(0x7f0000000580)="9277e7488fae7f53170c1b5a24182b48720767c8364bd2eb35fa93c712da9546b5a7a05e9ec7211979bc4cb90b266559f0ee135551123f8514c7c6eac300ca3046bf295cabb89016f2c49d5c1f3f458e7d0dc020c5217a35f794bda3bbc9e0f7c0f7b5dd0387222ef188632a05b966afce3a9e9b89015c8a0aea8ef3a55a9502e05480deaad57494faa91d71316db288e1e05082b248bb0920d1d78a65795b5789bc0e480a4e54d8bcd0f11b03711ffbfc54ca8c6958df222ee46b80d07adbb53199521b0022e2261e8e030fc8ba378dd29cf300a63a58642442e4d7d3", &(0x7f0000000680)="705b5ccc307fb2cd3e8244f3fb61f0d206df3d316e15d9c77e76028b4e2033ef5b3bbcf89e7e4c5e54f04b0ecfc558633f0af92b5947e4c98819edbeaa2e15f023327d7199907e8b306734c363f449d6cee270e1ec97951f9c7ec675775b42a31c9b4dd28729f3cbb50116a4fa354bdf8dab1e905e197da8ae6f93126a053f7a3eee59fb4692671139d5caa34a116ebd64a068bcc785a6a3dbc35403d1817411bcfccd407fd47ff2b8bc765185a020f928f0f37dd81b9f0e7ed7165b8af2cc752fe8e698d81c12406a54e2fe183ca458adbe546831666d97bccb29038ede314a", 0x200000}) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000f40)={0x0, 0x30b2, 0x0, 0x42, 0x377}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000300)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r7 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = memfd_create(&(0x7f0000000e40)='\x94\xc3+\x8fb\r\x00\x00\x00\x00\x00\x00', 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r10, 0x89b1, &(0x7f0000000e80)={'dummy0\x00', @ifru_mtu=0x80}) syz_clone(0x48240000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000a40)={'tunl0\x00', &(0x7f0000000ec0)={'ip_vti0\x00', r11, 0x80, 0x8, 0x9, 0x1, {{0x14, 0x4, 0x3, 0x2c, 0x50, 0x67, 0x0, 0x8, 0x4, 0x0, @empty, @local, {[@rr={0x7, 0x17, 0xd, [@loopback, @loopback, @remote, @broadcast, @local]}, @lsrr={0x83, 0x23, 0xc2, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @local, @multicast1, @loopback, @rand_addr=0x64010102]}]}}}}}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e65766500000800028004000e0014000300"], 0x4c}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000140)=0x5) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000080)=0x3) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x80000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x7de, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x114}}}, &(0x7f00000009c0)=0x0) r14 = dup(0xffffffffffffffff) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000dc0)=@IORING_OP_MSG_RING={0x28, 0x33, 0x0, r14, &(0x7f0000000d00)="803decf29231731e3931ddb7bf9181a6e2b19e363aa6c7dae4d515b931fb22dc7f72e4a51d35d792b28c5c94ac177fc6bf56ec6b230d3195c97fabb432c05db7009dcb56dcd8ecf0c0173686e75f3f4053991c77b390e49a8a2b2b0a77cf1d8f29b878331f0513e8b31ed8733ea4abc12b389357106b42c71b3b2c2c79270ea240507d64577a2b", 0x0, 0x8, 0x0, 0x0, {0x0, 0x0, r7, 0x100000000}}) syz_ublk_setup_queues(r14, r13, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x41006, 0x8015e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac3, 0x8000, 0x10000000, 0x549}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ded, 0x800, 0x2, 0xfffffffc, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x1003, 0x151, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x3, 0x17, 0x0, 0x0, 0x7}, 0x94) 4.92577006s ago: executing program 2 (id=2089): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0x0, 0x10, &(0x7f00000016c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x4000}, 0x48) 4.925705017s ago: executing program 2 (id=2090): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="5400000011000100000002000000000007000000", @ANYRES32, @ANYBLOB="000000000000000034001a80060000000200000028000580240001"], 0x54}}, 0x0) 4.924570964s ago: executing program 2 (id=2091): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x644001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) rt_sigpending(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x231cd000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000380)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 4.804093054s ago: executing program 1 (id=2092): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000500)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000000580)=[{0x0, 0x0, 0x1800}, {0x2, 0x0, 0x2000}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000041c0)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000042c0)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004300)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="23000000f400000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0x1, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) io_uring_setup(0x5923, &(0x7f0000000000)={0x0, 0xe37d, 0x400, 0x3, 0x3a}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000003c0)=""/31, &(0x7f0000000400)=0x1f) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xb0, 0x38, 0x10, 0x70bd25, 0x65dfdbfe, {0x1a}, [@typed={0x5, 0x29, 0x0, 0x0, @str='\x00'}, @generic="81847657d79569f9ad57d7ec1bd41ebbd0ab82762259b83b5ff079ea2c07240ee864a91c4e06569d4bffd432e67e5a97e560b5eb8848af045360b587f32a7cb0d9a96a6658e5fa22a3b79fca017545968a5dfd783cb2aa289298322d1e4cf5a27dc88f9c569d2db9d7f06a3b8b7026c3f4027462a0c5ff449a8483933e51869e8e63ff028e58b4832b", @typed={0x8, 0x141, 0x0, 0x0, @ipv4=@multicast2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008840}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r5, 0x6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000180)=0x84) 4.657052475s ago: executing program 1 (id=2093): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0x0, 0x10, &(0x7f00000016c0), 0xfffffffffffffd00}, 0x48) 4.556809429s ago: executing program 1 (id=2094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000d80)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000dc0)={'syzkaller1\x00', @link_local}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x3f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x890c, &(0x7f0000000240)=@generic={0x0, 0x200000000002}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f0000000280)={0x9, 0x0, [{0xb82, 0x0, 0x4}, {0xad6, 0x0, 0x9}, {0x8e3, 0x0, 0x9}, {0xbc6, 0x0, 0xc}, {0x9c9, 0x0, 0x7}, {0xaeb, 0x0, 0x84}, {0x858, 0x0, 0x9}, {0xb56, 0x0, 0xdd69}, {0x283, 0x0, 0x2}]}) (async) r9 = socket(0xa, 0x3, 0x100) sendmsg$inet6(r9, &(0x7f0000000340)={&(0x7f0000000380)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="671723d7c6012c", 0x10}, {&(0x7f0000000440)="9efe80000000000000dfe52c1f51218206f5abfd2a00"/33, 0x21}], 0x2}, 0x20008b88) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x34, r10, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x7ff, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4048800}, 0x4000000) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x7101}) (async) openat$mice(0xffffff9c, &(0x7f0000000640), 0x301) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040ac0538024000010203010902240601010000000904000000030102"], 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) io_setup(0x81, &(0x7f00000006c0)) syz_io_uring_setup(0x2af8, &(0x7f0000000700)={0x0, 0x0, 0x13090, 0x3}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) 3.596737291s ago: executing program 1 (id=2095): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x200008f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a00009048000010301010009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="00690b0000000b241b"], 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, &(0x7f0000000680)={0x2, 0xfffa, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) r6 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000800)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x6c7e, &(0x7f0000000880)={0x0, 0x0, 0x3000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20040051) r7 = io_uring_setup(0x7, &(0x7f0000000940)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2217, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f00000004c0)=0x90) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=r8, @ANYBLOB="0002060006003b0f0600080005000700"], 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)=@o_path={&(0x7f0000000540)='./file0\x00', r9, 0x4000, r6}, 0x18) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000640)={0x1, 0x0, 0x0, &(0x7f0000000680), 0x0}) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f00000007c0)=0x1) setreuid(0xee01, 0xee01) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.357488365s ago: executing program 4 (id=2096): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f00000000f300005504000001ed90002500000017ff2000dd40000000000000730a13fe000000002f04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0x0, 0x10, &(0x7f0000001240), 0x1e}, 0x48) 3.314702016s ago: executing program 4 (id=2097): syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5c200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112403010102000000000000000002008add3207b72a7a504a2163e52b"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x200240, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000300)=[0x0, 0x0], 0x1, 0x5, 0x1, 0x2}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r6, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x18c6) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000100), 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000001c0)={r7, 0xfff, 0xc0, 0x44, 0x0, [], [0x7b6, 0x7, 0x7, 0xa], [0x101, 0x8, 0xfffff849, 0x8000000], [0x7, 0x453, 0x8, 0x4]}) 2.692341172s ago: executing program 3 (id=2101): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0x0, 0x10, &(0x7f00000016c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xb0ff}, 0x48) 2.673204839s ago: executing program 3 (id=2102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x30}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x265}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x2, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x4000002, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.21919833s ago: executing program 3 (id=2105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200f6000000000000000000000000ff010000000000000000000000000001ff0200ffffff80000000000000000001ffffffff0000000000000031000000006c01"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.142393915s ago: executing program 3 (id=2106): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000940)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)="c955a2104c63421f77708990a420494d355d4e2c1e097af5eb16f17cd356084e07d427b237e70c94836080ce377e9c2cbb729ba3223621585e41eeb52e8e7bcb52cbfad4e934f9a2342ad3d16d36a6ab56cbd3d3b3ba43f98f5d20c143c0dc7b0087ac09dc58276e2e5fd81518b0b23e25f76183b6", &(0x7f0000000580)="9277e7488fae7f53170c1b5a24182b48720767c8364bd2eb35fa93c712da9546b5a7a05e9ec7211979bc4cb90b266559f0ee135551123f8514c7c6eac300ca3046bf295cabb89016f2c49d5c1f3f458e7d0dc020c5217a35f794bda3bbc9e0f7c0f7b5dd0387222ef188632a05b966afce3a9e9b89015c8a0aea8ef3a55a9502e05480deaad57494faa91d71316db288e1e05082b248bb0920d1d78a65795b5789bc0e480a4e54d8bcd0f11b03711ffbfc54ca8c6958df222ee46b80d07adbb53199521b0022e2261e8e030fc8ba378dd29cf300a63a58642442e4d7d3", &(0x7f0000000680)="705b5ccc307fb2cd3e8244f3fb61f0d206df3d316e15d9c77e76028b4e2033ef5b3bbcf89e7e4c5e54f04b0ecfc558633f0af92b5947e4c98819edbeaa2e15f023327d7199907e8b306734c363f449d6cee270e1ec97951f9c7ec675775b42a31c9b4dd28729f3cbb50116a4fa354bdf8dab1e905e197da8ae6f93126a053f7a3eee59fb4692671139d5caa34a116ebd64a068bcc785a6a3dbc35403d1817411bcfccd407fd47ff2b8bc765185a020f928f0f37dd81b9f0e7ed7165b8af2cc752fe8e698d81c12406a54e2fe183ca458adbe546831666d97bccb29038ede314a", 0x200000}) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000f40)={0x0, 0x30b2, 0x0, 0x42, 0x377}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000300)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r6 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = memfd_create(&(0x7f0000000e40)='\x94\xc3+\x8fb\r\x00\x00\x00\x00\x00\x00', 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r9, 0x89b1, &(0x7f0000000e80)={'dummy0\x00', @ifru_mtu=0x80}) syz_clone(0x48240000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r8, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000a40)={'tunl0\x00', &(0x7f0000000ec0)={'ip_vti0\x00', r10, 0x80, 0x8, 0x9, 0x1, {{0x14, 0x4, 0x3, 0x2c, 0x50, 0x67, 0x0, 0x8, 0x4, 0x0, @empty, @local, {[@rr={0x7, 0x17, 0xd, [@loopback, @loopback, @remote, @broadcast, @local]}, @lsrr={0x83, 0x23, 0xc2, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @local, @multicast1, @loopback, @rand_addr=0x64010102]}]}}}}}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e65766500000800028004000e0014000300"], 0x4c}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000140)=0x5) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000080)=0x3) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000dc0)=@IORING_OP_MSG_RING={0x28, 0x33, 0x0, r13, &(0x7f0000000d00)="803decf29231731e3931ddb7bf9181a6e2b19e363aa6c7dae4d515b931fb22dc7f72e4a51d35d792b28c5c94ac177fc6bf56ec6b230d3195c97fabb432c05db7009dcb56dcd8ecf0c0173686e75f3f4053991c77b390e49a8a2b2b0a77cf1d8f29b878331f0513e8b31ed8733ea4abc12b389357106b42c71b3b2c2c79270ea240507d64577a2b", 0x0, 0x8, 0x0, 0x0, {0x0, 0x0, r6, 0x100000000}}) syz_ublk_setup_queues(r13, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x41006, 0x8015e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac3, 0x8000, 0x10000000, 0x549}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ded, 0x800, 0x2, 0xfffffffc, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x1003, 0x151, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x3, 0x17, 0x0, 0x0, 0x7}, 0x94) 1.796782139s ago: executing program 2 (id=2107): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) syz_usb_connect$uac1(0x1, 0xec, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x3, 0xc0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x974b, 0x15}, [@processing_unit={0xb, 0x24, 0x7, 0x6, 0x2, 0xa9, "d84563ea"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x4, 0x9e}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x10, 0x2, 0x8, 0x2, "e688c7"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x9, 0x61, 0xfc}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0xfd, "620664e0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x7, 0xc, {0x7, 0x25, 0x1, 0xc, 0x40, 0xc2d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0x9, 0x6, "9e59f7", "74f127"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xdd, 0x8, 0x6, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x3, 0x4, 0x7, "17"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x400, 0x4, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0xb2, 0xb, "a159ffbf7eca2f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x2, 0x7, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x7, 0x3, {0x7, 0x25, 0x1, 0x4, 0x0, 0xf}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x2, 0x8, 0x2, 0x20, 0x8}, 0x39, &(0x7f0000000340)={0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x1, 0xf00, 0xfe, [0xffc180, 0x0, 0x18000, 0x3f00, 0xff6000, 0x0]}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x5, 0xf, 0x3, [0x81ff]}]}, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0xb7, &(0x7f0000000400)=@string={0xb7, 0x3, "06beee77f43d6ac7a05d86f66980133ed709b47bfd22bd129f56c4caece2cef0ee527da1ea802e54a4697e9969963ea7fc645e46566dd586548f35b8c5ab959be0af87457d261b0dbd45c2fe199908a761ef29fbb9f07a8ec4ff17b52b5203ab46121719824da442c509f6e23ffa977fd56beda24debc98f846c50eb30d2803a09b450b2d19177f99b3628f1289a344395b1f85f4188ce2a29b4cd46c46851b26ab0322049a92b3635d5c74e3a5e0db5e00ddb8872"}}, {0x17, &(0x7f00000004c0)=@string={0x17, 0x3, "bdf833e65fa870b384e4e8e4e88873dbf1e801a175"}}, {0x67, &(0x7f0000000500)=@string={0x67, 0x3, "b7b0464712912bfba13c84de268e98a730bad64d66886c07508d0de7e6b4f101d607e225c3f50477b4e8715637878d0b9d13c4f83fe97a9c370a2199d31ef5e5f5d729a620b28278252c796de1d8adc4744ccf138ea4b6dbd0557747a3c7ed65081468e11d"}}]}) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x40, 0xc0001) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) 1.668666276s ago: executing program 0 (id=2108): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0x0, 0x10, &(0x7f00000016c0), 0xfffffffffffffd00}, 0x48) 1.605000414s ago: executing program 0 (id=2109): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) r1 = openat$ext4_procfs(0xffffffffffffff9c, &(0x7f0000000040)={'/proc/fs/ext4/loop', 0x0, 0x2f, 'mb_structs_summary\x00'}, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x15) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000080)=0x1f6) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xc}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2056}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200)={0x93b, 0x89, 0x2, 0x8001}, 0x8) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000240)) r2 = epoll_create(0xa) r3 = dup2(r2, r0) epoll_pwait2(r3, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xff4c]}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e24, @loopback}, 0x10) r5 = epoll_create(0x6) epoll_pwait2(r5, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f00000004c0)={[0x5]}, 0x8) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000500)={0x0, 0x1ece, 0x0, 0x3, 0xf9, 0x0, r3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x98f1, 0x4000, 0x2, 0x1e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x860d, 0x2000, 0x0, 0xc3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x201e, 0x4, 0x1, 0x17e, 0x0, r3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca14, 0x200, 0x1, 0x127, 0x0, r3}}], 0x4, &(0x7f0000001800)={0x2e, 0x19, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x16a9}, 0x0, 0x0, '\x00', {0x0, 0x13f, 0x0, &(0x7f0000000800)=@buf_4k="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"}}, &(0x7f0000001880)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000018c0)={0x6, r3, 0x3, {0x1, 0xffffffffffffdbeb}, 0x7}, 0x1) getpeername$inet(r3, &(0x7f0000001900), &(0x7f0000001940)=0x10) sendto$inet(r1, &(0x7f0000001980)="48a3483bad305ba1863e1e45", 0xc, 0x50, 0x0, 0x0) unshare(0x8000000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000019c0)={0x2, 0xe8}, &(0x7f0000001a00)=0x8) setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r4, 0x84, 0x84, &(0x7f0000001a40)={r7, @in={{0x2, 0x4e24, @multicast1}}, 0x4e20}, 0x90) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001b00)={r1, 0x0, 0x25, 0x0, @void}, 0x10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000001b40)={0x7, r8, 0x4, {0x8, 0x2b05}, 0x1}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r1) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000001bc0)) getsockopt$inet_sctp_SCTP_EVENT(r4, 0x84, 0x7f, &(0x7f0000001c00)={r7, 0x8002, 0x1}, &(0x7f0000001c40)=0x8) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000001c80)={r9, 0x80000001}, &(0x7f0000001cc0)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 1.44806531s ago: executing program 0 (id=2110): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x800, 0x84000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000700)) socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0xef, 0x2, 0x0, 0x1, 0x5}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r2}, 0x38) syz_clone3(&(0x7f00000001c0)={0x23800000, &(0x7f0000000280), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000180)={0xba, 0x0, [{0x400000b4, 0x0, 0xffffffff}]}) (async) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000180)={0xba, 0x0, [{0x400000b4, 0x0, 0xffffffff}]}) r6 = syz_open_dev$video(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000003c0)={0x1, 0x2, 0x2}) (async) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000003c0)={0x1, 0x2, 0x2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000640)={@my=0x1}) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000640)={@my=0x1}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000004c0)={0x1, 0x1, 0x2}) (async) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000004c0)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000500)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x8, 0x8, "00000010"}, 0x0, 0x2, {&(0x7f0000000580)}, 0x9e}) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f00000005c0)=0x2) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000600)=0x1) (async) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000600)=0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 845.236213ms ago: executing program 0 (id=2111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000080)={0x0, 0x40000200, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 842.655575ms ago: executing program 3 (id=2112): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0x0, 0x10, &(0x7f00000016c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xf3ff}, 0x48) 739.15842ms ago: executing program 3 (id=2113): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) clock_gettime(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x1b7c, &(0x7f0000000200)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0x401) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000340)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 508.127115ms ago: executing program 1 (id=2114): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x15, &(0x7f00000001c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) unlinkat(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000000)="901c2de2262ee1efb0e450a8d8adeafdd6447fdeb9779dceb324d414f5579fdc3ddbe9874e07399206d7471198dad7788543cf07b5ba85200116552f639c8ebf") 389.528949ms ago: executing program 2 (id=2115): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000018fe01ed7203f0fff8ffffff61a4f0ff000000004e040000000000002d400200000000004704000001ed00007b3300feff0000001d440200000000007a0ab0fe00ffffffdb03ff8010010000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062bc54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687e5b3a70bfe9b4a9c5ad0ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe0296e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b0800000000000000f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d877acb906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a0000000000000080c64affa54fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c90000000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139ee37d2eac953fc48a981e2200653e6b68a214c8a31b899e4e940ce8309faffbcbaebf9985146cb086a76e39056570501e07be91a3ec708455b964b66dfa3123fa6b324d43a2edbaff04eb25dce61b2c12f0451a6de7f92ff51f44a69dedb7361a02b47dcd6cf5ad509daf6afc19e5c1ac0121b5e7b739c25f87deabfb57679bfe4a3bf5abf271410c601ecd2022b19ee313b3166bbdde861be3a9a80e527ae9153a5d90e3f275c2273186fae42275a70b6bf1c9acbce1ada05e8aa1375e37445e8db286851840fa3306e8e68c2e4248b2556ae0473449919ff29d58105ac4b9846ced5c85c0613b912aa3befdad5285cf8e45254af9f4de4243e537ae30f358901b564f08e392a4a314beb31022971d638182290ec98ee936bc729f008b8d282b04bc9e0ca2837"], &(0x7f0000001640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f00000016c0), 0x10}, 0x1a) 239.859286ms ago: executing program 2 (id=2116): r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000180)={0x0, 0x8550, 0xc00, 0x1, 0xa6}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x6d, 0x0, 0x0, 0x0, 0x0, 0xc, {0x102}, 0x1}) r4 = syz_clone(0x811ba751, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x88901) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r7 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83(\xd01`\xd7\xdf\xffY\x11\x11\x0e\xa1\xfc\x00\x00\x00\x17\x00\x00\a\x00\x00\x00\xf3\x00\x00\xc6\x00\x00\x00\x00', 0x1) ftruncate(r7, 0x1000004) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000840)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000880)={0xc, r9}) ioctl$IOMMU_VFIO_SET_IOMMU(r8, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r8, 0x3b71, &(0x7f00000008c0)={0x20, 0x0, &(0x7f0000000900), 0x10000, 0x80000000}) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000440)={r7, 0x0, 0x0, 0x1000000000000}) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000480)={r7, 0x0, 0x0, 0x1000000}) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r10, 0xfffffffc) accept4$inet6(r5, &(0x7f0000000740)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000780)=0x1c, 0x800) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f00000007c0)={0x2, 0x4e22, @local}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x4e24, @private=0xa010102}, 0x10) syz_open_procfs(r4, &(0x7f0000000540)='net/tcp\x00') 210.077625ms ago: executing program 0 (id=2117): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeed, 0x110, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) rmdir(&(0x7f0000000000)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4, 0x2) 129.350623ms ago: executing program 4 (id=2118): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c000000060a030400000000000000000a00000518000480140001800b0001"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="c80000004200010002000000000000000201000042420000500001"], 0xc8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=@newae={0x70, 0x1e, 0xd11, 0x70bd25, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x4d6, 0x8, 0x6c}, @in=@broadcast, 0x5}, [@mark={0xc, 0x15, {0x35075b, 0x588}}, @lifetime_val={0x24, 0x9, {0x691d, 0x5, 0xe, 0x200}}]}, 0x70}, 0x1, 0x0, 0x0, 0x820}, 0x8000) 8.513775ms ago: executing program 0 (id=2119): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0x0, 0x10, &(0x7f00000016c0), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 4 (id=2120): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000000240)}) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 0x7f10f1da94d9 code=0x7ffc0000 [ 400.547692][ T31] audit: type=1326 audit(1794616344.541:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.3.1572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f1da94d9 code=0x7ffc0000 [ 400.547846][ T31] audit: type=1326 audit(1794616344.541:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.3.1572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f1da94d9 code=0x7ffc0000 [ 400.601457][ T31] audit: type=1326 audit(1794616344.551:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.3.1572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f10f1da94d9 code=0x7ffc0000 [ 400.651588][ T31] audit: type=1326 audit(1794616344.621:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.3.1572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f1da94d9 code=0x7ffc0000 [ 400.651628][ T31] audit: type=1326 audit(1794616344.621:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.3.1572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f1da94d9 code=0x7ffc0000 [ 400.651650][ T31] audit: type=1326 audit(1794616344.621:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.3.1572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f10f1da94d9 code=0x7ffc0000 [ 402.289659][ T5713] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 402.439700][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 402.440625][ T5713] usb 4-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 402.442783][ T5713] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 402.442805][ T5713] usb 4-1: config 0 has no interface number 0 [ 402.442841][ T5713] usb 4-1: config 0 interface 12 has no altsetting 0 [ 402.447415][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.447436][ T5713] usb 4-1: Product: syz [ 402.447448][ T5713] usb 4-1: Manufacturer: syz [ 402.447460][ T5713] usb 4-1: SerialNumber: syz [ 402.486074][ T5713] usb 4-1: config 0 descriptor?? [ 403.110683][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'. [ 403.110729][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'. [ 403.110774][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1592'. [ 404.688744][T11234] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 404.981220][ T5713] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 404.981296][ T5713] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 404.981319][ T5713] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 404.981393][ T5713] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 405.026004][ T5713] usb 4-1: USB disconnect, device number 68 [ 407.873278][ T11] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 408.054900][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 408.055355][ T11] usb 4-1: not running at top speed; connect to a high speed hub [ 408.055372][ T11] usb 4-1: New USB device found: idVendor=102c, idProduct=6151, bcdDevice=11.08 [ 408.057470][ T11] usb 4-1: config 16 has an invalid interface number: 203 but max is 0 [ 408.057493][ T11] usb 4-1: config 16 has no interface number 0 [ 408.057508][ T11] usb 4-1: config 16 interface 203 has no altsetting 0 [ 408.109104][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.109120][ T11] usb 4-1: Product: syz [ 408.109128][ T11] usb 4-1: Manufacturer: syz [ 408.109135][ T11] usb 4-1: SerialNumber: syz [ 408.351750][T11291] netlink: 'syz.3.1613': attribute type 8 has an invalid length. [ 408.374430][ T11] gspca_main: etoms-2.14.0 probing 102c:6151 [ 408.499786][ T5715] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 408.522756][ T11] usb 4-1: USB disconnect, device number 69 [ 408.629933][ T5715] usb 3-1: device descriptor read/64, error -71 [ 408.871643][ T5715] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 408.999624][ T5715] usb 3-1: device descriptor read/64, error -71 [ 409.110065][ T5715] usb usb3-port1: attempt power cycle [ 409.449693][ T5715] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 409.472194][ T5715] usb 3-1: device descriptor read/8, error -71 [ 409.711475][ T5715] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 409.730545][ T5715] usb 3-1: device descriptor read/8, error -71 [ 409.840929][ T5715] usb usb3-port1: unable to enumerate USB device [ 410.279658][ T25] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 410.430942][ T25] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 410.433908][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 410.433928][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 410.433949][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.438828][T11322] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 410.495967][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.653201][ T25] usb 2-1: USB disconnect, device number 69 [ 411.020108][ T1225] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 411.179759][ T1225] usb 4-1: Using ep0 maxpacket: 32 [ 411.181512][ T1225] usb 4-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 411.182570][ T1225] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.182583][ T1225] usb 4-1: config 0 has no interface number 0 [ 411.184373][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.184397][ T1225] usb 4-1: Product: syz [ 411.184411][ T1225] usb 4-1: Manufacturer: syz [ 411.184426][ T1225] usb 4-1: SerialNumber: syz [ 411.187391][ T1225] usb 4-1: config 0 descriptor?? [ 411.193343][ T1225] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 411.193409][ T1225] usb 4-1: selecting invalid altsetting 1 [ 411.193424][ T1225] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 411.230795][ T1225] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 411.232571][ T1225] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 411.232626][ T1225] usb 4-1: media controller created [ 411.304468][ T1225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.354126][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'. [ 411.396651][ T1225] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 411.396767][ T1225] zl10353_read_register: readreg error (reg=127, ret==-71) [ 411.399442][ T1225] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 411.545545][ T1225] usb 4-1: USB disconnect, device number 70 [ 411.850497][ T11] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 411.990100][ T11] usb 2-1: device descriptor read/64, error -71 [ 412.209714][ T1225] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 412.229669][ T11] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 412.369686][ T11] usb 2-1: device descriptor read/64, error -71 [ 412.370321][ T1225] usb 4-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 412.372477][ T1225] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 412.372492][ T1225] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 412.372512][ T1225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.479974][ T11] usb usb2-port1: attempt power cycle [ 412.832246][ T11] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 412.855752][ T1225] usbhid 4-1:1.0: can't add hid device: -71 [ 412.855876][ T1225] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 412.857336][ T11] usb 2-1: device descriptor read/8, error -71 [ 412.863594][ T1225] usb 4-1: USB disconnect, device number 71 [ 412.898172][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1636'. [ 413.099605][ T11] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 413.120156][ T11] usb 2-1: device descriptor read/8, error -71 [ 413.241040][ T11] usb usb2-port1: unable to enumerate USB device [ 413.514991][T11375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 413.718480][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1639'. [ 414.109893][ T5705] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 414.260349][ T5705] usb 3-1: New USB device found: idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 414.261262][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.262836][ T5705] usb 3-1: config 0 descriptor?? [ 414.266447][ T5705] usb-storage 3-1:0.0: USB Mass Storage device detected [ 414.505176][ T11] usb 3-1: USB disconnect, device number 73 [ 415.023665][T11407] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 415.120534][T11417] FAULT_INJECTION: forcing a failure. [ 415.120534][T11417] name failslab, interval 1, probability 0, space 0, times 0 [ 415.120569][T11417] CPU: 0 UID: 0 PID: 11417 Comm: syz.2.1651 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.120597][T11417] Tainted: [L]=SOFTLOCKUP [ 415.120605][T11417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 415.120617][T11417] Call Trace: [ 415.120626][T11417] [ 415.120635][T11417] dump_stack_lvl+0xe8/0x150 [ 415.120675][T11417] should_fail_ex+0x3eb/0x540 [ 415.120706][T11417] should_failslab+0xa8/0x100 [ 415.120741][T11417] __kmalloc_cache_noprof+0x9e/0x600 [ 415.120769][T11417] ? rcu_is_watching+0x16/0xb0 [ 415.120797][T11417] ? vhost_task_create+0x123/0x380 [ 415.120843][T11417] ? vhost_task_create+0x123/0x380 [ 415.120873][T11417] vhost_task_create+0x123/0x380 [ 415.120899][T11417] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 415.120941][T11417] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 415.120971][T11417] ? __pfx_vhost_task_create+0x10/0x10 [ 415.120993][T11417] ? register_lock_class+0x31/0x2e0 [ 415.121028][T11417] ? __pfx_vhost_task_fn+0x10/0x10 [ 415.121062][T11417] ? kasan_quarantine_put+0xbb/0x1f0 [ 415.121098][T11417] kvm_mmu_post_init_vm+0x147/0x2b0 [ 415.121134][T11417] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 415.121184][T11417] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 415.121216][T11417] kvm_vcpu_ioctl+0xa61/0xfd0 [ 415.121248][T11417] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 415.121294][T11417] ? __fget_files+0x2a/0x420 [ 415.121335][T11417] ? __fget_files+0x2a/0x420 [ 415.121359][T11417] ? __fget_files+0x2a/0x420 [ 415.121387][T11417] ? bpf_lsm_file_ioctl+0x9/0x20 [ 415.121416][T11417] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 415.121441][T11417] __se_sys_ioctl+0xfc/0x170 [ 415.121475][T11417] do_syscall_64+0x16a/0x530 [ 415.121502][T11417] ? trace_irq_disable+0x3b/0x140 [ 415.121529][T11417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.121550][T11417] ? clear_bhb_loop+0x70/0xc0 [ 415.121575][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.121596][T11417] RIP: 0033:0x7f7c673a94d9 [ 415.121616][T11417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.121634][T11417] RSP: 002b:00007f7c68222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.121657][T11417] RAX: ffffffffffffffda RBX: 00007f7c67625fa0 RCX: 00007f7c673a94d9 [ 415.121672][T11417] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 415.121685][T11417] RBP: 00007f7c68222090 R08: 0000000000000000 R09: 0000000000000000 [ 415.121698][T11417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.121710][T11417] R13: 00007f7c67626038 R14: 00007f7c67625fa0 R15: 00007f7c6774fa48 [ 415.121747][T11417] [ 415.199103][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880580d4400: rx timeout, send abort [ 415.277907][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 415.311644][ T1225] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 415.480678][ T1225] usb 2-1: New USB device found: idVendor=045a, idProduct=5210, bcdDevice=1.01 [ 415.484588][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.484618][ T1225] usb 2-1: Product: syz [ 415.484633][ T1225] usb 2-1: Manufacturer: syz [ 415.484648][ T1225] usb 2-1: SerialNumber: syz [ 415.506288][ T1225] ums-karma 2-1:1.0: USB Mass Storage device detected [ 415.525476][ T1225] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 415.525476][ T1225] Please send a copy of this message to and [ 415.675289][T11421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 415.698433][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880580d7c00: rx timeout, send abort [ 415.708176][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880580d4400: abort rx timeout. Force session deactivation [ 416.100734][ T1225] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 416.116527][ T1225] usb 2-1: USB disconnect, device number 74 [ 416.198478][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880580d7c00: abort rx timeout. Force session deactivation [ 416.703021][T11454] xt_hashlimit: size too large, truncated to 1048576 [ 416.901553][T11460] FAULT_INJECTION: forcing a failure. [ 416.901553][T11460] name failslab, interval 1, probability 0, space 0, times 0 [ 416.901589][T11460] CPU: 1 UID: 0 PID: 11460 Comm: syz.3.1664 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.901618][T11460] Tainted: [L]=SOFTLOCKUP [ 416.901626][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 416.901638][T11460] Call Trace: [ 416.901647][T11460] [ 416.901657][T11460] dump_stack_lvl+0xe8/0x150 [ 416.901697][T11460] should_fail_ex+0x3eb/0x540 [ 416.901729][T11460] ? dup_task_struct+0x52/0xa00 [ 416.901779][T11460] should_failslab+0xa8/0x100 [ 416.901814][T11460] ? dup_task_struct+0x52/0xa00 [ 416.901839][T11460] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 416.901869][T11460] ? dup_task_struct+0x52/0xa00 [ 416.901904][T11460] dup_task_struct+0x52/0xa00 [ 416.901934][T11460] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.902015][T11460] copy_process+0x7ea/0x4510 [ 416.902082][T11460] ? rcu_is_watching+0x16/0xb0 [ 416.902119][T11460] ? __pfx_copy_process+0x10/0x10 [ 416.902157][T11460] ? mutex_init_lockdep+0xdf/0x110 [ 416.902192][T11460] vhost_task_create+0x1f9/0x380 [ 416.902219][T11460] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 416.902247][T11460] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 416.902277][T11460] ? __pfx_vhost_task_create+0x10/0x10 [ 416.902301][T11460] ? register_lock_class+0x31/0x2e0 [ 416.902337][T11460] ? __pfx_vhost_task_fn+0x10/0x10 [ 416.902373][T11460] ? kasan_quarantine_put+0xbb/0x1f0 [ 416.902412][T11460] kvm_mmu_post_init_vm+0x147/0x2b0 [ 416.902447][T11460] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 416.902489][T11460] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 416.902523][T11460] kvm_vcpu_ioctl+0xa61/0xfd0 [ 416.902556][T11460] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 416.902604][T11460] ? __fget_files+0x2a/0x420 [ 416.902635][T11460] ? __fget_files+0x2a/0x420 [ 416.902660][T11460] ? __fget_files+0x2a/0x420 [ 416.902691][T11460] ? bpf_lsm_file_ioctl+0x9/0x20 [ 416.902722][T11460] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 416.902749][T11460] __se_sys_ioctl+0xfc/0x170 [ 416.902784][T11460] do_syscall_64+0x16a/0x530 [ 416.902812][T11460] ? trace_irq_disable+0x3b/0x140 [ 416.902840][T11460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.902861][T11460] ? clear_bhb_loop+0x70/0xc0 [ 416.902886][T11460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.902905][T11460] RIP: 0033:0x7f10f1da94d9 [ 416.902924][T11460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.902942][T11460] RSP: 002b:00007f10effee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.902967][T11460] RAX: ffffffffffffffda RBX: 00007f10f2025fa0 RCX: 00007f10f1da94d9 [ 416.902982][T11460] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 416.902994][T11460] RBP: 00007f10effee090 R08: 0000000000000000 R09: 0000000000000000 [ 416.903007][T11460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.903019][T11460] R13: 00007f10f2026038 R14: 00007f10f2025fa0 R15: 00007f10f214fa48 [ 416.903054][T11460] [ 417.271505][T11471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.641378][T11484] netlink: 'syz.4.1670': attribute type 9 has an invalid length. [ 417.714282][T11481] netlink: 'syz.1.1669': attribute type 10 has an invalid length. [ 417.714350][T11481] tipc: Resetting bearer [ 418.230152][T11491] tipc: Enabling of bearer rejected, already enabled [ 418.472103][T11497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 418.479966][ T5713] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 418.640477][ T5713] usb 3-1: New USB device found: idVendor=1038, idProduct=12b6, bcdDevice=0.00 [ 418.642706][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.642731][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.642751][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.644643][ T5713] usb 3-1: config 0 descriptor?? [ 419.058908][ T5713] hid-steelseries-arctis 0003:1038:12B6.0016: item fetching failed at offset 6/7 [ 419.062217][ T5713] hid-steelseries-arctis 0003:1038:12B6.0016: probe with driver hid-steelseries-arctis failed with error -22 [ 419.282193][ T5713] usb 3-1: USB disconnect, device number 74 [ 419.749769][ T5713] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 419.909856][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 419.910701][ T5713] usb 4-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 419.913165][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 419.915712][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.915737][ T5713] usb 4-1: Product: syz [ 419.915752][ T5713] usb 4-1: Manufacturer: syz [ 419.915766][ T5713] usb 4-1: SerialNumber: syz [ 419.954705][ T5713] usb 4-1: config 0 descriptor?? [ 419.978878][ T5713] hub 4-1:0.0: bad descriptor, ignoring hub [ 419.979096][ T5713] hub 4-1:0.0: probe with driver hub failed with error -5 [ 419.996986][ T5713] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.070160][ T5713] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 420.116997][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.289857][ T5713] usb 4-1: USB disconnect, device number 72 [ 421.295605][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1689'. [ 421.376559][T11550] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 421.395925][T11550] tipc: Enabled bearer , priority 10 [ 421.400040][T11543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1689'. [ 423.103757][T11577] FAULT_INJECTION: forcing a failure. [ 423.103757][T11577] name failslab, interval 1, probability 0, space 0, times 0 [ 423.103782][T11577] CPU: 1 UID: 0 PID: 11577 Comm: syz.0.1697 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.103800][T11577] Tainted: [L]=SOFTLOCKUP [ 423.103805][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 423.103812][T11577] Call Trace: [ 423.103817][T11577] [ 423.103823][T11577] dump_stack_lvl+0xe8/0x150 [ 423.103850][T11577] should_fail_ex+0x3eb/0x540 [ 423.103877][T11577] should_failslab+0xa8/0x100 [ 423.103898][T11577] ? alloc_pid+0x1a4/0x1340 [ 423.103912][T11577] kmem_cache_alloc_noprof+0x9c/0x600 [ 423.103927][T11577] ? __kmalloc_noprof+0x366/0x710 [ 423.103942][T11577] ? security_task_alloc+0x4d/0x330 [ 423.103958][T11577] ? copy_process+0x1c75/0x4510 [ 423.103975][T11577] ? kvm_mmu_post_init_vm+0x147/0x2b0 [ 423.103993][T11577] ? alloc_pid+0x1a4/0x1340 [ 423.104010][T11577] alloc_pid+0x1a4/0x1340 [ 423.104029][T11577] ? __pfx_alloc_pid+0x10/0x10 [ 423.104052][T11577] ? fpu_clone+0x334/0xaf0 [ 423.104101][T11577] ? __asan_memcpy+0x40/0x70 [ 423.104118][T11577] ? copy_thread+0x72a/0x970 [ 423.104137][T11577] copy_process+0x217d/0x4510 [ 423.104163][T11577] ? copy_process+0xd17/0x4510 [ 423.104191][T11577] ? __pfx_copy_process+0x10/0x10 [ 423.104213][T11577] ? mutex_init_lockdep+0xdf/0x110 [ 423.104234][T11577] vhost_task_create+0x1f9/0x380 [ 423.104249][T11577] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 423.104267][T11577] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 423.104285][T11577] ? __pfx_vhost_task_create+0x10/0x10 [ 423.104300][T11577] ? register_lock_class+0x31/0x2e0 [ 423.104320][T11577] ? __pfx_vhost_task_fn+0x10/0x10 [ 423.104341][T11577] ? kasan_quarantine_put+0xbb/0x1f0 [ 423.104368][T11577] kvm_mmu_post_init_vm+0x147/0x2b0 [ 423.104389][T11577] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 423.104408][T11577] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 423.104428][T11577] kvm_vcpu_ioctl+0xa61/0xfd0 [ 423.104447][T11577] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 423.104475][T11577] ? __fget_files+0x2a/0x420 [ 423.104493][T11577] ? __fget_files+0x2a/0x420 [ 423.104509][T11577] ? __fget_files+0x2a/0x420 [ 423.104527][T11577] ? bpf_lsm_file_ioctl+0x9/0x20 [ 423.104546][T11577] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 423.104562][T11577] __se_sys_ioctl+0xfc/0x170 [ 423.104583][T11577] do_syscall_64+0x16a/0x530 [ 423.104601][T11577] ? trace_irq_disable+0x3b/0x140 [ 423.104618][T11577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.104631][T11577] ? clear_bhb_loop+0x70/0xc0 [ 423.104647][T11577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.104659][T11577] RIP: 0033:0x7fe8b89a94d9 [ 423.104672][T11577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.104683][T11577] RSP: 002b:00007fe8b9865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.104698][T11577] RAX: ffffffffffffffda RBX: 00007fe8b8c25fa0 RCX: 00007fe8b89a94d9 [ 423.104708][T11577] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 423.104716][T11577] RBP: 00007fe8b9865090 R08: 0000000000000000 R09: 0000000000000000 [ 423.104724][T11577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.104731][T11577] R13: 00007fe8b8c26038 R14: 00007fe8b8c25fa0 R15: 00007fe8b8d4fa48 [ 423.104751][T11577] [ 424.021164][ T25] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 424.171863][ T25] usb 2-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 424.172953][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.173006][ T25] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 424.222058][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.222083][ T25] usb 2-1: Product: syz [ 424.222095][ T25] usb 2-1: Manufacturer: syz [ 424.222106][ T25] usb 2-1: SerialNumber: syz [ 424.264003][ T25] usb-storage 2-1:1.0: USB Mass Storage device detected [ 424.284472][ T25] scsi host1: usb-storage 2-1:1.0 [ 426.011454][T11616] FAULT_INJECTION: forcing a failure. [ 426.011454][T11616] name failslab, interval 1, probability 0, space 0, times 0 [ 426.011491][T11616] CPU: 0 UID: 0 PID: 11616 Comm: syz.0.1711 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.011518][T11616] Tainted: [L]=SOFTLOCKUP [ 426.011523][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 426.011531][T11616] Call Trace: [ 426.011537][T11616] [ 426.011543][T11616] dump_stack_lvl+0xe8/0x150 [ 426.011573][T11616] should_fail_ex+0x3eb/0x540 [ 426.011605][T11616] should_failslab+0xa8/0x100 [ 426.011638][T11616] __kvmalloc_node_noprof+0x171/0x820 [ 426.011670][T11616] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 426.011686][T11616] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 426.011704][T11616] __kvm_mmu_topup_memory_cache+0x461/0x600 [ 426.011718][T11616] ? lock_acquire+0x115/0x350 [ 426.011748][T11616] mmu_topup_memory_caches+0x21/0x1a0 [ 426.011777][T11616] kvm_mmu_load+0x9d/0x21e0 [ 426.011805][T11616] ? kvm_msr_allowed+0x9a/0x490 [ 426.011829][T11616] ? kvm_msr_allowed+0x9a/0x490 [ 426.011846][T11616] ? kvm_msr_allowed+0x9a/0x490 [ 426.011860][T11616] ? kvm_msr_allowed+0x3f4/0x490 [ 426.011875][T11616] ? kvm_msr_allowed+0x9a/0x490 [ 426.011889][T11616] ? kvm_apic_has_interrupt+0x740/0x770 [ 426.011933][T11616] vcpu_run+0x4f5b/0x7a90 [ 426.011956][T11616] ? lockdep_hardirqs_on+0x7b/0x110 [ 426.012028][T11616] ? __pfx_vcpu_run+0x10/0x10 [ 426.012043][T11616] ? lock_acquire+0x115/0x350 [ 426.012077][T11616] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 426.012107][T11616] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 426.012137][T11616] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 426.012157][T11616] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 426.012173][T11616] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 426.012192][T11616] kvm_vcpu_ioctl+0xa61/0xfd0 [ 426.012219][T11616] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 426.012277][T11616] ? __fget_files+0x2a/0x420 [ 426.012303][T11616] ? __fget_files+0x2a/0x420 [ 426.012322][T11616] ? __fget_files+0x2a/0x420 [ 426.012351][T11616] ? bpf_lsm_file_ioctl+0x9/0x20 [ 426.012381][T11616] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 426.012407][T11616] __se_sys_ioctl+0xfc/0x170 [ 426.012440][T11616] do_syscall_64+0x16a/0x530 [ 426.012460][T11616] ? trace_irq_disable+0x3b/0x140 [ 426.012478][T11616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.012491][T11616] ? clear_bhb_loop+0x70/0xc0 [ 426.012510][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.012531][T11616] RIP: 0033:0x7fe8b89a94d9 [ 426.012551][T11616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.012568][T11616] RSP: 002b:00007fe8b9865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.012591][T11616] RAX: ffffffffffffffda RBX: 00007fe8b8c25fa0 RCX: 00007fe8b89a94d9 [ 426.012605][T11616] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 426.012613][T11616] RBP: 00007fe8b9865090 R08: 0000000000000000 R09: 0000000000000000 [ 426.012620][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.012628][T11616] R13: 00007fe8b8c26038 R14: 00007fe8b8c25fa0 R15: 00007fe8b8d4fa48 [ 426.012648][T11616] [ 427.881100][T11642] ip_tables: iptables: counters copy to user failed while replacing table [ 427.994088][T11583] sctp: [Deprecated]: syz.1.1699 (pid 11583) Use of int in maxseg socket option. [ 427.994088][T11583] Use struct sctp_assoc_value instead [ 428.554556][ T1225] usb 2-1: USB disconnect, device number 75 [ 429.062333][ T25] hid_parser_main: 217 callbacks suppressed [ 429.062396][ T25] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 429.141815][ T25] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 429.749425][T11669] netlink: 'syz.0.1728': attribute type 21 has an invalid length. [ 429.749493][T11669] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1728'. [ 431.156694][T11680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 431.642260][T11699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.190125][ T1225] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 432.362442][ T1225] usb 4-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 432.365162][ T1225] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 432.365199][ T1225] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.365213][ T1225] usb 4-1: config 0 has no interface number 0 [ 432.365233][ T1225] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.369375][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.369403][ T1225] usb 4-1: Product: syz [ 432.369418][ T1225] usb 4-1: Manufacturer: syz [ 432.369433][ T1225] usb 4-1: SerialNumber: syz [ 432.445441][ T1225] usb 4-1: config 0 descriptor?? [ 432.460281][ T1225] yurex 4-1:0.50: Could not find endpoints [ 432.956860][ T1225] usb 4-1: USB disconnect, device number 73 [ 433.746937][T11731] xt_CT: No such helper "pptp" [ 434.314176][T11759] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 434.609827][ T1225] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 434.739943][ T1225] usb 4-1: device descriptor read/64, error -71 [ 434.981487][ T1225] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 435.110203][ T1225] usb 4-1: device descriptor read/64, error -71 [ 435.219925][ T1225] usb usb4-port1: attempt power cycle [ 435.266758][T11762] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 435.559774][ T1225] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 435.581206][ T1225] usb 4-1: device descriptor read/8, error -71 [ 435.821861][ T1225] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 435.841199][ T1225] usb 4-1: device descriptor read/8, error -71 [ 435.951660][ T1225] usb usb4-port1: unable to enumerate USB device [ 436.744164][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1754'. [ 437.485622][ T1225] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 437.632956][ T1225] usb 2-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 437.634069][ T1225] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.634151][ T1225] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 437.673174][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.673204][ T1225] usb 2-1: Product: syz [ 437.673218][ T1225] usb 2-1: Manufacturer: syz [ 437.673242][ T1225] usb 2-1: SerialNumber: syz [ 437.717970][ T1225] usb-storage 2-1:1.0: USB Mass Storage device detected [ 437.740981][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1760'. [ 437.762274][ T1225] scsi host1: usb-storage 2-1:1.0 [ 437.766033][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 437.800510][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1760'. [ 438.329646][ T1225] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 438.479998][ T1225] usb 4-1: Using ep0 maxpacket: 32 [ 438.480500][ T1225] usb 4-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 438.481615][ T1225] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 438.481633][ T1225] usb 4-1: config 0 has no interface number 0 [ 438.481662][ T1225] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 438.481674][ T1225] usb 4-1: config 0 interface 1 has no altsetting 0 [ 438.484473][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.484495][ T1225] usb 4-1: Product: syz [ 438.484511][ T1225] usb 4-1: Manufacturer: syz [ 438.484525][ T1225] usb 4-1: SerialNumber: syz [ 438.489452][ T1225] usb 4-1: config 0 descriptor?? [ 438.721441][ T1225] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 438.743075][ T1225] cx231xx 4-1:0.1: Failed to read PCB config [ 438.743119][ T1225] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 438.748550][ T1225] usb 4-1: USB disconnect, device number 78 [ 438.819935][T11785] sctp: [Deprecated]: syz.1.1755 (pid 11785) Use of int in maxseg socket option. [ 438.819935][T11785] Use struct sctp_assoc_value instead [ 439.231632][ T1225] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 439.339578][ T5715] usb 2-1: USB disconnect, device number 76 [ 439.389844][ T1225] usb 4-1: Using ep0 maxpacket: 32 [ 439.391720][ T1225] usb 4-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 439.423059][ T1225] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 439.423081][ T1225] usb 4-1: config 0 has no interface number 0 [ 439.423108][ T1225] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 439.423121][ T1225] usb 4-1: config 0 interface 1 has no altsetting 0 [ 439.428738][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.428768][ T1225] usb 4-1: Product: syz [ 439.428784][ T1225] usb 4-1: Manufacturer: syz [ 439.428798][ T1225] usb 4-1: SerialNumber: syz [ 439.456873][ T1225] usb 4-1: config 0 descriptor?? [ 439.689793][ T1225] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 439.696392][ T1225] cx231xx 4-1:0.1: bad config in buspower!!!! [ 439.696392][ T1225] config_info=40 [ 439.696407][ T1225] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 439.802370][ T1225] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 439.803596][ T1225] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 439.825890][ T1225] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 439.852928][ T1225] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 439.862409][ T1225] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 439.862428][ T1225] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -32 [ 439.903671][T11804] cx231xx 4-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 439.938581][ T1225] i2c i2c-2: Added multiplexed i2c bus 4 [ 439.945979][T11825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.946215][T11825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.998906][ T1225] i2c i2c-2: Added multiplexed i2c bus 5 [ 440.005715][ T1225] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 440.005741][ T1225] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 440.034412][T11830] cx231xx 4-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 440.433971][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.434012][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.298830][ T1225] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 441.340369][ T1225] usb 4-1: USB disconnect, device number 79 [ 441.657891][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1773'. [ 441.869917][ T1225] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 442.028339][ T1225] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 442.043709][ T1225] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.043758][ T1225] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 442.043775][ T1225] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 442.043791][ T1225] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.043824][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.540327][ T5705] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 442.714103][ T5705] usb 4-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 442.719009][ T5705] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.719084][ T5705] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 442.768083][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.768117][ T5705] usb 4-1: Product: syz [ 442.768133][ T5705] usb 4-1: Manufacturer: syz [ 442.768148][ T5705] usb 4-1: SerialNumber: syz [ 442.817745][ T5705] usb-storage 4-1:1.0: USB Mass Storage device detected [ 442.844113][ T5705] scsi host1: usb-storage 4-1:1.0 [ 443.059853][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e454c00: rx timeout, send abort [ 443.060313][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e454c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 443.066310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e455c00: rx timeout, send abort [ 443.066533][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e455c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 444.016567][T11888] sctp: [Deprecated]: syz.3.1778 (pid 11888) Use of int in maxseg socket option. [ 444.016567][T11888] Use struct sctp_assoc_value instead [ 444.191943][T11896] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 444.335955][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e455800: rx timeout, send abort [ 444.336274][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e455800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 444.700116][ T5733] usb 3-1: USB disconnect, device number 75 [ 444.828832][ T5715] usb 4-1: USB disconnect, device number 80 [ 445.045234][T11900] syz_tun: left promiscuous mode [ 445.181502][T11900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.209907][T11900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.660821][ T5733] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 445.815082][ T5733] usb 2-1: New USB device found: idVendor=04d9, idProduct=a055, bcdDevice=0.00 [ 445.816835][ T5733] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 445.816881][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.816900][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.816912][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 445.816939][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.863196][ T5733] usb 2-1: config 0 descriptor?? [ 446.009833][ T25] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 446.160735][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 446.161920][ T25] usb 3-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 446.164202][ T25] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.164229][ T25] usb 3-1: config 0 has no interface number 0 [ 446.164306][ T25] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 446.164328][ T25] usb 3-1: config 0 interface 1 has no altsetting 0 [ 446.226178][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.226209][ T25] usb 3-1: Product: syz [ 446.226262][ T25] usb 3-1: Manufacturer: syz [ 446.226277][ T25] usb 3-1: SerialNumber: syz [ 446.257352][ T25] usb 3-1: config 0 descriptor?? [ 446.318282][ T5733] usbhid 2-1:0.0: can't add hid device: -71 [ 446.318402][ T5733] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 446.349818][ T5733] usb 2-1: USB disconnect, device number 77 [ 446.499259][ T25] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 446.499278][ T25] cx231xx 3-1:0.1: Not found matching IAD interface [ 446.523585][ T25] usb 3-1: USB disconnect, device number 76 [ 448.234682][T11936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 448.611921][ T5715] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 448.689800][ T5733] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 448.773272][ T5715] usb 4-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 448.774604][ T5715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.774655][ T5715] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 448.819127][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.819148][ T5715] usb 4-1: Product: syz [ 448.819158][ T5715] usb 4-1: Manufacturer: syz [ 448.819166][ T5715] usb 4-1: SerialNumber: syz [ 448.863610][ T5733] usb 3-1: Using ep0 maxpacket: 16 [ 448.875485][ T5733] usb 3-1: unable to get BOS descriptor or descriptor too short [ 448.875540][ T5733] usb 3-1: New USB device found: idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 448.877103][ T5733] usb 3-1: config 4 has an invalid interface number: 86 but max is 0 [ 448.877131][ T5733] usb 3-1: config 4 has no interface number 0 [ 448.877174][ T5733] usb 3-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 448.877200][ T5733] usb 3-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 448.877215][ T5733] usb 3-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 448.877228][ T5733] usb 3-1: config 4 interface 86 has no altsetting 0 [ 448.935015][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.935036][ T5733] usb 3-1: Product: syz [ 448.935045][ T5733] usb 3-1: Manufacturer: syz [ 448.935053][ T5733] usb 3-1: SerialNumber: syz [ 449.018396][ T5715] usb-storage 4-1:1.0: USB Mass Storage device detected [ 449.042417][ T5715] scsi host1: usb-storage 4-1:1.0 [ 449.480763][T11959] macsec0: entered promiscuous mode [ 449.480907][T11959] macsec0: entered allmulticast mode [ 449.480915][T11959] veth1_macvtap: entered allmulticast mode [ 450.245625][ T5733] cypress_m8 3-1:4.86: DeLorme Earthmate USB converter detected [ 450.306723][ T5733] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 450.347125][ T5733] usb 3-1: USB disconnect, device number 77 [ 450.395036][ T5733] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 450.395778][ T5733] cypress_m8 3-1:4.86: device disconnected [ 450.728550][T11991] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1805'. [ 450.939969][ T5733] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 451.059234][T11978] sctp: [Deprecated]: syz.3.1798 (pid 11978) Use of int in maxseg socket option. [ 451.059234][T11978] Use struct sctp_assoc_value instead [ 451.113620][ T25] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 451.114171][ T5733] usb 3-1: Using ep0 maxpacket: 32 [ 451.117138][ T5733] usb 3-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 451.195664][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.195703][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.195753][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.231790][ T5733] usb 3-1: config 0 descriptor?? [ 451.264807][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 451.294868][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 451.294926][ T25] usb 2-1: New USB device found: idVendor=2b73, idProduct=0029, bcdDevice=0.40 [ 451.320450][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.320479][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.359857][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.359888][ T25] usb 2-1: Product: syz [ 451.359903][ T25] usb 2-1: Manufacturer: syz [ 451.359918][ T25] usb 2-1: SerialNumber: syz [ 451.639833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 451.789993][ T5733] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 451.790031][ T5733] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 451.794827][ T25] usb 2-1: 0:1 : does not exist [ 451.794931][ T25] usb 2-1: BAAD MICROPHONE c_chmask mismatch [ 451.844557][ T5733] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 451.948497][ T25] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 451.965160][ T25] usb 2-1: USB disconnect, device number 78 [ 451.980570][ T5733] ft260 0003:0403:6030.0018: failed to retrieve system status [ 451.983879][ T5733] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -32 [ 452.024555][ T5705] usb 4-1: USB disconnect, device number 81 [ 452.148822][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.458332][T12006] netlink: 'syz.0.1808': attribute type 10 has an invalid length. [ 452.458436][T12006] tipc: Resetting bearer [ 452.667278][T12011] tipc: Enabled bearer , priority 0 [ 452.960264][ T5715] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 453.120322][ T5715] usb 4-1: New USB device found: idVendor=1038, idProduct=12b6, bcdDevice=0.00 [ 453.136792][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.136817][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.136856][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.180572][ T5715] usb 4-1: config 0 descriptor?? [ 453.610667][ T5715] hid-steelseries-arctis 0003:1038:12B6.0019: item fetching failed at offset 6/7 [ 453.611021][ T5715] hid-steelseries-arctis 0003:1038:12B6.0019: probe with driver hid-steelseries-arctis failed with error -22 [ 453.678603][ T5715] usb 3-1: USB disconnect, device number 78 [ 453.776322][T12013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 453.823346][ T25] usb 4-1: USB disconnect, device number 82 [ 454.869895][ T25] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 455.022219][ T25] usb 2-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 455.024147][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.024193][ T25] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 455.028686][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.028705][ T25] usb 2-1: Product: syz [ 455.028714][ T25] usb 2-1: Manufacturer: syz [ 455.028723][ T25] usb 2-1: SerialNumber: syz [ 455.103725][ T25] usb-storage 2-1:1.0: USB Mass Storage device detected [ 455.121089][ T25] scsi host1: usb-storage 2-1:1.0 [ 455.720362][ T5705] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 455.870751][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 455.875417][ T5705] usb 3-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 455.901446][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.937632][ T5705] pvrusb2: Hardware description: Terratec Grabster AV400 [ 455.937666][ T5705] pvrusb2: ********** [ 455.937672][ T5705] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 455.937678][ T5705] pvrusb2: Important functionality might not be entirely working. [ 455.937683][ T5705] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 455.937688][ T5705] pvrusb2: ********** [ 456.140433][ T2355] pvrusb2: Invalid write control endpoint [ 456.140452][ T2355] pvrusb2: Device being rendered inoperable [ 456.144615][ T5705] usb 3-1: USB disconnect, device number 79 [ 456.217868][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 456.217885][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 456.611626][T12055] sctp: [Deprecated]: syz.1.1819 (pid 12055) Use of int in maxseg socket option. [ 456.611626][T12055] Use struct sctp_assoc_value instead [ 457.065204][T12065] tipc: Enabling of bearer rejected, already enabled [ 457.201063][ T5715] usb 2-1: USB disconnect, device number 79 [ 457.226989][T12068] tipc: Enabling of bearer rejected, already enabled [ 457.293034][ T31] audit: type=1326 audit(1794616401.291:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.1828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b1a94d9 code=0x7ffc0000 [ 457.293199][ T31] audit: type=1326 audit(1794616401.291:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.1828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b1a94d9 code=0x7ffc0000 [ 457.293350][ T31] audit: type=1326 audit(1794616401.291:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.1828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b1a94d9 code=0x7ffc0000 [ 457.294476][ T31] audit: type=1326 audit(1794616401.291:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.1828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb6b1a94d9 code=0x7ffc0000 [ 457.295089][ T31] audit: type=1326 audit(1794616401.291:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.1828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b1a94d9 code=0x7ffc0000 [ 457.296119][ T31] audit: type=1326 audit(1794616401.291:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.1828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b1a94d9 code=0x7ffc0000 [ 457.296250][ T31] audit: type=1326 audit(1794616401.291:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.1828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b1a94d9 code=0x7ffc0000 [ 457.297606][ T31] audit: type=1326 audit(1794616401.291:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.1828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b1a94d9 code=0x7ffc0000 [ 457.298077][ T31] audit: type=1326 audit(1794616401.291:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.1828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b1a94d9 code=0x7ffc0000 [ 457.299267][ T31] audit: type=1326 audit(1794616401.291:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.1828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b1a94d9 code=0x7ffc0000 [ 457.561104][ T5733] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 457.730275][ T5733] usb 3-1: New USB device found: idVendor=1038, idProduct=12b6, bcdDevice=0.00 [ 457.731189][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.731220][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.731250][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.781705][ T5733] usb 3-1: config 0 descriptor?? [ 458.220574][ T5733] hid-steelseries-arctis 0003:1038:12B6.001A: item fetching failed at offset 6/7 [ 458.221020][ T5733] hid-steelseries-arctis 0003:1038:12B6.001A: probe with driver hid-steelseries-arctis failed with error -22 [ 458.336271][T12081] ip_tables: iptables: counters copy to user failed while replacing table [ 458.417933][ T5713] usb 3-1: USB disconnect, device number 80 [ 458.582439][ T5733] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 462.672532][T12022] syz.2.1813 (12022) used greatest stack depth: 15624 bytes left [ 463.927853][T11823] syz.2.1766 (11823) used greatest stack depth: 14888 bytes left [ 479.955593][T12092] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1832'. [ 480.198112][T12096] netlink: 976 bytes leftover after parsing attributes in process `syz.4.1835'. [ 480.232390][T12093] kvm [12090]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 480.250132][ T5705] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 480.401089][ T5705] usb 4-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 480.402420][ T5705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 480.402436][ T5705] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 480.402448][ T5705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 480.404524][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.404557][ T5705] usb 4-1: Product: syz [ 480.404572][ T5705] usb 4-1: Manufacturer: syz [ 480.404586][ T5705] usb 4-1: SerialNumber: syz [ 480.412386][ T5705] usb 4-1: config 0 descriptor?? [ 480.414032][T12091] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 480.414170][T12091] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 480.416668][ T5705] usb 4-1: ucan: probing device on interface #0 [ 480.529468][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'. [ 480.850808][ T5705] usb 4-1: ucan: device reported invalid device info [ 480.850826][ T5705] usb 4-1: ucan: probe failed; try to update the device firmware [ 481.329872][T12113] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1837'. [ 481.329908][T12113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1837'. [ 481.339441][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 481.761497][T12127] tipc: Enabling of bearer rejected, already enabled [ 481.899694][ T5733] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 482.051353][ T5733] usb 2-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 482.052460][ T5733] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.052505][ T5733] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 482.055916][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.055930][ T5733] usb 2-1: Product: syz [ 482.055938][ T5733] usb 2-1: Manufacturer: syz [ 482.055945][ T5733] usb 2-1: SerialNumber: syz [ 482.144683][ T5733] usb-storage 2-1:1.0: USB Mass Storage device detected [ 482.163270][ T5733] scsi host1: usb-storage 2-1:1.0 [ 482.531013][T12139] netlink: 'syz.4.1843': attribute type 10 has an invalid length. [ 482.534487][T12139] tipc: Resetting bearer [ 482.550554][T12139] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 482.977488][ T5733] usb 4-1: USB disconnect, device number 84 [ 483.166589][T12144] tipc: Rcv corrupt discovery message [ 483.318160][T12142] sctp: [Deprecated]: syz.1.1840 (pid 12142) Use of int in maxseg socket option. [ 483.318160][T12142] Use struct sctp_assoc_value instead [ 483.597538][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 483.597566][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 483.903482][ T5733] usb 2-1: USB disconnect, device number 80 [ 484.141183][T12170] bridge_slave_0: entered promiscuous mode [ 484.283052][T12172] bond1: entered allmulticast mode [ 484.296687][T12172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1853'. [ 485.069889][ T5733] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 485.111738][T12202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 485.221439][ T5733] usb 4-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 485.223397][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.223640][ T5733] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 485.227945][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.227960][ T5733] usb 4-1: Product: syz [ 485.227967][ T5733] usb 4-1: Manufacturer: syz [ 485.227974][ T5733] usb 4-1: SerialNumber: syz [ 485.300709][ T5733] usb-storage 4-1:1.0: USB Mass Storage device detected [ 485.319131][ T5733] scsi host1: usb-storage 4-1:1.0 [ 486.205853][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'. [ 486.354142][T12195] sctp: [Deprecated]: syz.3.1862 (pid 12195) Use of int in maxseg socket option. [ 486.354142][T12195] Use struct sctp_assoc_value instead [ 486.479677][ T5715] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 486.629627][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 486.632248][ T5715] usb 2-1: unable to get BOS descriptor set [ 486.632310][ T5715] usb 2-1: New USB device found: idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 486.633348][ T5715] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 486.633373][ T5715] usb 2-1: config 127 has no interface number 0 [ 486.633404][ T5715] usb 2-1: config 127 interface 124 has no altsetting 0 [ 486.635440][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=183 [ 486.635464][ T5715] usb 2-1: Product: syz [ 486.635478][ T5715] usb 2-1: Manufacturer: syz [ 486.635493][ T5715] usb 2-1: SerialNumber: syz [ 487.042252][T12225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.042743][T12225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.100837][T12228] tipc: Enabling of bearer rejected, already enabled [ 487.259736][ T25] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 487.389622][ T25] usb 3-1: device descriptor read/64, error -71 [ 487.499678][ T5715] usb 2-1: reset high-speed USB device number 81 using dummy_hcd [ 487.521817][T12207] usb 4-1: reset high-speed USB device number 85 using dummy_hcd [ 487.629675][ T25] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 487.667439][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 487.673464][T12207] usb 4-1: device firmware changed [ 487.674093][ T5715] usb 2-1: device firmware changed [ 487.679430][ T5715] usb 2-1: USB disconnect, device number 81 [ 487.680678][ T5733] usb 4-1: USB disconnect, device number 85 [ 487.779832][ T25] usb 3-1: device descriptor read/64, error -71 [ 487.891179][ T25] usb usb3-port1: attempt power cycle [ 487.909786][ T5733] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 488.060524][ T5733] usb 4-1: New USB device found: idVendor=1038, idProduct=12b6, bcdDevice=0.00 [ 488.061676][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.061701][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.061732][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.063333][ T5733] usb 4-1: config 0 descriptor?? [ 488.239767][ T25] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 488.260527][ T25] usb 3-1: device descriptor read/8, error -71 [ 488.364752][T12233] kAFS: unable to lookup cell '(G' [ 488.396845][T12232] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1874'. [ 488.471074][ T5733] hid-steelseries-arctis 0003:1038:12B6.001B: item fetching failed at offset 6/7 [ 488.472139][ T5733] hid-steelseries-arctis 0003:1038:12B6.001B: probe with driver hid-steelseries-arctis failed with error -22 [ 488.502268][ T25] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 488.520426][ T25] usb 3-1: device descriptor read/8, error -71 [ 488.576012][T12239] openvswitch: netlink: Missing valid actions attribute. [ 488.576053][T12239] openvswitch: netlink: Actions may not be safe on all matching packets [ 488.630213][ T25] usb usb3-port1: unable to enumerate USB device [ 488.686635][ T5715] usb 4-1: USB disconnect, device number 86 [ 489.058135][T12259] netlink: 'syz.0.1879': attribute type 10 has an invalid length. [ 491.349845][ T5733] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 491.452300][T12293] tipc: Enabling of bearer rejected, already enabled [ 491.510267][ T5733] usb 2-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 491.515090][ T5733] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 491.515110][ T5733] usb 2-1: config 0 has no interface number 0 [ 491.515134][ T5733] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 491.515148][ T5733] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 491.515164][ T5733] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 491.515179][ T5733] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 491.515193][ T5733] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 491.515209][ T5733] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 491.515236][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.517896][ T5733] usb 2-1: config 0 descriptor?? [ 491.519750][T12277] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 491.519893][T12277] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 491.537706][ T25] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 491.662716][ T5733] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 491.740976][ T5705] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 491.742613][ T25] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 491.742898][ T25] usb 4-1: too many configurations: 102, using maximum allowed: 8 [ 491.743921][ T25] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 491.743939][ T25] usb 4-1: config 1 has no interface number 0 [ 491.744981][ T25] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 491.744999][ T25] usb 4-1: config 1 has no interface number 0 [ 491.746611][ T25] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 491.746630][ T25] usb 4-1: config 1 has no interface number 0 [ 491.775302][ T25] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 491.775319][ T25] usb 4-1: config 1 has no interface number 0 [ 491.805393][ T25] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 491.805413][ T25] usb 4-1: config 1 has no interface number 0 [ 491.850919][ T25] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 491.850935][ T25] usb 4-1: config 1 has no interface number 0 [ 491.870167][ T25] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 491.870196][ T25] usb 4-1: config 1 has no interface number 0 [ 491.871591][ T25] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 491.871611][ T25] usb 4-1: config 1 has no interface number 0 [ 491.876038][ T25] usb 4-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 491.876060][ T25] usb 4-1: Product: syz [ 491.876072][ T25] usb 4-1: Manufacturer: syz [ 491.876084][ T25] usb 4-1: SerialNumber: syz [ 491.936953][ T25] usb 4-1: 3:0 : does not exist [ 491.936974][ T25] usb 4-1: 3:0 : does not exist [ 491.951567][ T5705] usb 3-1: New USB device found: idVendor=1038, idProduct=12b6, bcdDevice=0.00 [ 491.953902][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.953936][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.953977][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.981262][ T5705] usb 3-1: config 0 descriptor?? [ 492.437150][ T5705] hid-steelseries-arctis 0003:1038:12B6.001C: item fetching failed at offset 6/7 [ 492.452038][ T5705] hid-steelseries-arctis 0003:1038:12B6.001C: probe with driver hid-steelseries-arctis failed with error -22 [ 492.589937][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1898'. [ 492.654300][ T5715] usb 3-1: USB disconnect, device number 85 [ 492.687645][T12307] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1899'. [ 492.787991][T12309] ip6erspan0: entered allmulticast mode [ 493.640357][ T25] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 493.791214][ T25] usb 3-1: device descriptor read/64, error -71 [ 494.040014][ T25] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 494.047842][ T5715] usb 2-1: USB disconnect, device number 82 [ 494.070725][ T5715] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 494.180281][ T25] usb 3-1: device descriptor read/64, error -71 [ 494.300656][ T25] usb usb3-port1: attempt power cycle [ 494.401167][ T5713] usb 4-1: USB disconnect, device number 87 [ 494.549740][ T5715] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 494.649683][ T25] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 494.670861][ T25] usb 3-1: device descriptor read/8, error -71 [ 494.700242][ T5715] usb 2-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 494.701080][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.701119][ T5715] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 494.713174][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.713201][ T5715] usb 2-1: Product: syz [ 494.713215][ T5715] usb 2-1: Manufacturer: syz [ 494.713229][ T5715] usb 2-1: SerialNumber: syz [ 494.741552][ T5715] usb-storage 2-1:1.0: USB Mass Storage device detected [ 494.774774][ T5715] scsi host1: usb-storage 2-1:1.0 [ 494.929841][ T25] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 494.935956][T12328] netlink: 'syz.3.1907': attribute type 10 has an invalid length. [ 494.961376][ T25] usb 3-1: device descriptor read/8, error -71 [ 495.070014][ T25] usb usb3-port1: unable to enumerate USB device [ 496.025659][T12323] sctp: [Deprecated]: syz.1.1905 (pid 12323) Use of int in maxseg socket option. [ 496.025659][T12323] Use struct sctp_assoc_value instead [ 496.503403][T12342] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1910'. [ 496.534744][ T5715] usb 2-1: USB disconnect, device number 83 [ 496.840287][T12344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 497.031200][T12347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 497.852066][T12365] FAULT_INJECTION: forcing a failure. [ 497.852066][T12365] name failslab, interval 1, probability 0, space 0, times 0 [ 497.852104][T12365] CPU: 1 UID: 0 PID: 12365 Comm: syz.3.1917 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.852132][T12365] Tainted: [L]=SOFTLOCKUP [ 497.852140][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 497.852152][T12365] Call Trace: [ 497.852161][T12365] [ 497.852170][T12365] dump_stack_lvl+0xe8/0x150 [ 497.852217][T12365] should_fail_ex+0x3eb/0x540 [ 497.852252][T12365] should_failslab+0xa8/0x100 [ 497.852285][T12365] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 497.852312][T12365] kmem_cache_alloc_noprof+0x9c/0x600 [ 497.852338][T12365] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 497.852371][T12365] ? kmem_cache_alloc_noprof+0x151/0x600 [ 497.852398][T12365] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 497.852432][T12365] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 497.852471][T12365] mmu_topup_memory_caches+0x21/0x1a0 [ 497.852502][T12365] kvm_mmu_load+0x9d/0x21e0 [ 497.852533][T12365] ? kvm_msr_allowed+0x9a/0x490 [ 497.852560][T12365] ? kvm_msr_allowed+0x9a/0x490 [ 497.852586][T12365] ? kvm_msr_allowed+0x9a/0x490 [ 497.852611][T12365] ? kvm_msr_allowed+0x3f4/0x490 [ 497.852638][T12365] ? kvm_msr_allowed+0x9a/0x490 [ 497.852663][T12365] ? kvm_apic_has_interrupt+0x740/0x770 [ 497.852711][T12365] vcpu_run+0x4f5b/0x7a90 [ 497.852828][T12365] ? __pfx_vcpu_run+0x10/0x10 [ 497.852853][T12365] ? lock_acquire+0x115/0x350 [ 497.852889][T12365] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 497.852922][T12365] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 497.852955][T12365] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 497.852984][T12365] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 497.853010][T12365] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 497.853044][T12365] kvm_vcpu_ioctl+0xa61/0xfd0 [ 497.853077][T12365] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 497.853129][T12365] ? __fget_files+0x2a/0x420 [ 497.853160][T12365] ? __fget_files+0x2a/0x420 [ 497.853187][T12365] ? __fget_files+0x2a/0x420 [ 497.853218][T12365] ? bpf_lsm_file_ioctl+0x9/0x20 [ 497.853250][T12365] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 497.853276][T12365] __se_sys_ioctl+0xfc/0x170 [ 497.853311][T12365] do_syscall_64+0x16a/0x530 [ 497.853343][T12365] ? trace_irq_disable+0x3b/0x140 [ 497.853379][T12365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.853404][T12365] ? clear_bhb_loop+0x70/0xc0 [ 497.853430][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.853451][T12365] RIP: 0033:0x7f10f1da94d9 [ 497.853473][T12365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.853490][T12365] RSP: 002b:00007f10effee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.853514][T12365] RAX: ffffffffffffffda RBX: 00007f10f2025fa0 RCX: 00007f10f1da94d9 [ 497.853529][T12365] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 497.853542][T12365] RBP: 00007f10effee090 R08: 0000000000000000 R09: 0000000000000000 [ 497.853555][T12365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.853567][T12365] R13: 00007f10f2026038 R14: 00007f10f2025fa0 R15: 00007f10f214fa48 [ 497.853604][T12365] [ 498.156912][T12370] ip_tables: iptables: counters copy to user failed while replacing table [ 498.490176][ T30] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 498.629727][ T30] usb 3-1: device descriptor read/64, error -71 [ 498.660017][ T11] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 498.810397][ T11] usb 4-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 498.811561][ T11] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.811600][ T11] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 498.813892][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.813996][ T11] usb 4-1: Product: syz [ 498.814013][ T11] usb 4-1: Manufacturer: syz [ 498.814027][ T11] usb 4-1: SerialNumber: syz [ 498.829999][ T11] usb-storage 4-1:1.0: USB Mass Storage device detected [ 498.839915][ T11] scsi host1: usb-storage 4-1:1.0 [ 498.920014][ T30] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 499.070014][ T30] usb 3-1: device descriptor read/64, error -71 [ 499.200856][ T30] usb usb3-port1: attempt power cycle [ 499.560024][ T30] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 499.591615][ T30] usb 3-1: device descriptor read/8, error -71 [ 499.712216][T12382] sctp: [Deprecated]: syz.3.1922 (pid 12382) Use of int in maxseg socket option. [ 499.712216][T12382] Use struct sctp_assoc_value instead [ 499.830268][ T30] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 499.849652][ T5713] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 499.850368][ T30] usb 3-1: device descriptor read/8, error -71 [ 499.959879][ T30] usb usb3-port1: unable to enumerate USB device [ 500.000401][ T5713] usb 2-1: New USB device found: idVendor=045e, idProduct=009d, bcdDevice=0.00 [ 500.001702][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.001757][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.001784][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.003598][ T5713] usb 2-1: config 0 descriptor?? [ 500.217123][ T30] usb 4-1: USB disconnect, device number 88 [ 500.431032][ T5713] microsoft 0003:045E:009D.001D: ignoring exceeding usage max [ 500.434672][ T5713] microsoft 0003:045E:009D.001D: item fetching failed at offset 21/24 [ 500.438070][ T5713] microsoft 0003:045E:009D.001D: parse failed [ 500.438187][ T5713] microsoft 0003:045E:009D.001D: probe with driver microsoft failed with error -22 [ 500.482358][T12416] FAULT_INJECTION: forcing a failure. [ 500.482358][T12416] name failslab, interval 1, probability 0, space 0, times 0 [ 500.482382][T12416] CPU: 0 UID: 0 PID: 12416 Comm: syz.0.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.482401][T12416] Tainted: [L]=SOFTLOCKUP [ 500.482405][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 500.482413][T12416] Call Trace: [ 500.482418][T12416] [ 500.482424][T12416] dump_stack_lvl+0xe8/0x150 [ 500.482453][T12416] should_fail_ex+0x3eb/0x540 [ 500.482472][T12416] should_failslab+0xa8/0x100 [ 500.482497][T12416] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 500.482511][T12416] kmem_cache_alloc_noprof+0x9c/0x600 [ 500.482527][T12416] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 500.482539][T12416] ? kmem_cache_alloc_noprof+0x151/0x600 [ 500.482554][T12416] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 500.482572][T12416] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 500.482593][T12416] mmu_topup_memory_caches+0x21/0x1a0 [ 500.482610][T12416] kvm_mmu_load+0x9d/0x21e0 [ 500.482627][T12416] ? kvm_msr_allowed+0x9a/0x490 [ 500.482642][T12416] ? kvm_msr_allowed+0x9a/0x490 [ 500.482657][T12416] ? kvm_msr_allowed+0x9a/0x490 [ 500.482671][T12416] ? kvm_msr_allowed+0x3f4/0x490 [ 500.482685][T12416] ? kvm_msr_allowed+0x9a/0x490 [ 500.482700][T12416] ? kvm_apic_has_interrupt+0x740/0x770 [ 500.482727][T12416] vcpu_run+0x4f5b/0x7a90 [ 500.482786][T12416] ? __pfx_vcpu_run+0x10/0x10 [ 500.482800][T12416] ? lock_acquire+0x115/0x350 [ 500.482820][T12416] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 500.482843][T12416] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 500.482861][T12416] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 500.482878][T12416] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 500.482894][T12416] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 500.482913][T12416] kvm_vcpu_ioctl+0xa61/0xfd0 [ 500.482932][T12416] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 500.482960][T12416] ? __fget_files+0x2a/0x420 [ 500.482978][T12416] ? __fget_files+0x2a/0x420 [ 500.482994][T12416] ? __fget_files+0x2a/0x420 [ 500.483012][T12416] ? bpf_lsm_file_ioctl+0x9/0x20 [ 500.483031][T12416] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 500.483046][T12416] __se_sys_ioctl+0xfc/0x170 [ 500.483075][T12416] do_syscall_64+0x16a/0x530 [ 500.483103][T12416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.483123][T12416] ? clear_bhb_loop+0x70/0xc0 [ 500.483147][T12416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.483167][T12416] RIP: 0033:0x7fe8b89a94d9 [ 500.483184][T12416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.483195][T12416] RSP: 002b:00007fe8b9865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.483210][T12416] RAX: ffffffffffffffda RBX: 00007fe8b8c25fa0 RCX: 00007fe8b89a94d9 [ 500.483220][T12416] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 500.483227][T12416] RBP: 00007fe8b9865090 R08: 0000000000000000 R09: 0000000000000000 [ 500.483235][T12416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.483243][T12416] R13: 00007fe8b8c26038 R14: 00007fe8b8c25fa0 R15: 00007fe8b8d4fa48 [ 500.483263][T12416] [ 500.627032][ T5713] usb 2-1: USB disconnect, device number 84 [ 500.884674][T12429] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1934'. [ 501.231846][ T25] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 501.231976][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1939'. [ 501.369798][ T25] usb 4-1: device descriptor read/64, error -71 [ 501.373219][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1941'. [ 501.619989][ T25] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 501.680265][ T30] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 501.749932][ T25] usb 4-1: device descriptor read/64, error -71 [ 501.837562][ T30] usb 3-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 501.850293][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.850342][ T30] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 501.858580][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.858597][ T30] usb 3-1: Product: syz [ 501.858604][ T30] usb 3-1: Manufacturer: syz [ 501.858611][ T30] usb 3-1: SerialNumber: syz [ 501.871194][ T25] usb usb4-port1: attempt power cycle [ 501.874489][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.874546][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.937428][ T30] usb-storage 3-1:1.0: USB Mass Storage device detected [ 501.954907][ T30] scsi host1: usb-storage 3-1:1.0 [ 502.221756][ T25] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 502.240520][ T25] usb 4-1: device descriptor read/8, error -71 [ 502.489882][ T25] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 502.512566][ T25] usb 4-1: device descriptor read/8, error -71 [ 502.621147][ T25] usb usb4-port1: unable to enumerate USB device [ 502.738071][T12468] FAULT_INJECTION: forcing a failure. [ 502.738071][T12468] name failslab, interval 1, probability 0, space 0, times 0 [ 502.738103][T12468] CPU: 1 UID: 0 PID: 12468 Comm: syz.1.1945 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.738126][T12468] Tainted: [L]=SOFTLOCKUP [ 502.738131][T12468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 502.738141][T12468] Call Trace: [ 502.738148][T12468] [ 502.738155][T12468] dump_stack_lvl+0xe8/0x150 [ 502.738188][T12468] should_fail_ex+0x3eb/0x540 [ 502.738219][T12468] should_failslab+0xa8/0x100 [ 502.738245][T12468] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 502.738265][T12468] kmem_cache_alloc_noprof+0x9c/0x600 [ 502.738285][T12468] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 502.738301][T12468] ? kmem_cache_alloc_noprof+0x151/0x600 [ 502.738321][T12468] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 502.738345][T12468] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 502.738375][T12468] mmu_topup_memory_caches+0x21/0x1a0 [ 502.738404][T12468] kvm_mmu_load+0x9d/0x21e0 [ 502.738433][T12468] ? kvm_msr_allowed+0x9a/0x490 [ 502.738459][T12468] ? kvm_msr_allowed+0x9a/0x490 [ 502.738484][T12468] ? kvm_msr_allowed+0x9a/0x490 [ 502.738520][T12468] ? kvm_msr_allowed+0x3f4/0x490 [ 502.738546][T12468] ? kvm_msr_allowed+0x9a/0x490 [ 502.738570][T12468] ? kvm_apic_has_interrupt+0x740/0x770 [ 502.738617][T12468] vcpu_run+0x4f5b/0x7a90 [ 502.738640][T12468] ? lockdep_hardirqs_on+0x7b/0x110 [ 502.738756][T12468] ? __pfx_vcpu_run+0x10/0x10 [ 502.738781][T12468] ? lock_acquire+0x115/0x350 [ 502.738816][T12468] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 502.738848][T12468] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 502.738881][T12468] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 502.738911][T12468] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 502.738937][T12468] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 502.738971][T12468] kvm_vcpu_ioctl+0xa61/0xfd0 [ 502.739005][T12468] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 502.739055][T12468] ? __fget_files+0x2a/0x420 [ 502.739087][T12468] ? __fget_files+0x2a/0x420 [ 502.739113][T12468] ? __fget_files+0x2a/0x420 [ 502.739144][T12468] ? bpf_lsm_file_ioctl+0x9/0x20 [ 502.739176][T12468] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 502.739201][T12468] __se_sys_ioctl+0xfc/0x170 [ 502.739234][T12468] do_syscall_64+0x16a/0x530 [ 502.739260][T12468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.739282][T12468] ? clear_bhb_loop+0x70/0xc0 [ 502.739308][T12468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.739329][T12468] RIP: 0033:0x7f15011a94d9 [ 502.739349][T12468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.739366][T12468] RSP: 002b:00007f1501ff1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.739390][T12468] RAX: ffffffffffffffda RBX: 00007f1501425fa0 RCX: 00007f15011a94d9 [ 502.739405][T12468] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 502.739418][T12468] RBP: 00007f1501ff1090 R08: 0000000000000000 R09: 0000000000000000 [ 502.739432][T12468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.739444][T12468] R13: 00007f1501426038 R14: 00007f1501425fa0 R15: 00007f150154fa48 [ 502.739478][T12468] [ 503.201137][T12448] sctp: [Deprecated]: syz.2.1942 (pid 12448) Use of int in maxseg socket option. [ 503.201137][T12448] Use struct sctp_assoc_value instead [ 503.301931][T12475] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1948'. [ 503.639254][T12482] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1951'. [ 503.710269][ T5713] usb 3-1: USB disconnect, device number 94 [ 503.993986][ T30] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 504.131425][ T30] usb 2-1: device descriptor read/64, error -71 [ 504.371885][ T30] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 504.499778][ T30] usb 2-1: device descriptor read/64, error -71 [ 504.516630][ T5713] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 504.524827][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1960'. [ 504.565101][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1960'. [ 504.565354][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1960'. [ 504.565581][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1960'. [ 504.565813][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1960'. [ 504.625661][ T30] usb usb2-port1: attempt power cycle [ 504.679735][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 504.685437][ T5713] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 504.687633][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.718265][ T5713] usb 3-1: config 0 descriptor?? [ 504.939718][ T5713] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 504.948834][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.968585][ T5713] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 504.968649][ T5713] usb 3-1: media controller created [ 505.013217][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.113835][ T30] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 505.131604][ T30] usb 2-1: device descriptor read/8, error -71 [ 505.255820][T12521] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 505.289004][T12521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.306964][T12521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.317980][T12524] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 505.370103][ T30] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 505.391514][ T30] usb 2-1: device descriptor read/8, error -71 [ 505.501470][ T30] usb usb2-port1: unable to enumerate USB device [ 506.489639][ T25] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 506.640012][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 506.641669][ T25] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 506.643455][ T25] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 506.643486][ T25] usb 4-1: config 0 has no interface number 0 [ 506.643531][ T25] usb 4-1: config 0 interface 184 has no altsetting 0 [ 506.655476][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.655504][ T25] usb 4-1: Product: syz [ 506.655518][ T25] usb 4-1: Manufacturer: syz [ 506.655531][ T25] usb 4-1: SerialNumber: syz [ 506.667555][ T25] usb 4-1: config 0 descriptor?? [ 506.906095][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 506.906133][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 506.907840][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 506.907871][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 506.907890][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 506.907909][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 506.908214][ T25] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 507.267537][T12536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.268174][T12536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.311456][ T5713] az6027: usb out operation failed. (-110) [ 507.311514][ T5713] stb0899_attach: Driver disabled by Kconfig [ 507.311594][ T5713] az6027: no front-end attached [ 507.311594][ T5713] [ 507.313265][ T5713] az6027: usb out operation failed. (-32) [ 507.313321][ T5713] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 507.354389][ T5713] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 507.358688][ T5713] dvb-usb: schedule remote query interval to 400 msecs. [ 507.358712][ T5713] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 507.453632][ T25] usb 3-1: USB disconnect, device number 95 [ 507.684401][ T25] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 507.936248][T12553] netlink: 'syz.1.1968': attribute type 10 has an invalid length. [ 508.816714][T12562] sctp: [Deprecated]: syz.2.1972 (pid 12562) Use of int in max_burst socket option. [ 508.816714][T12562] Use struct sctp_assoc_value instead [ 508.918137][T12564] __nla_validate_parse: 35 callbacks suppressed [ 508.918189][T12564] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1973'. [ 509.108861][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1974'. [ 509.258375][ T5713] usb 4-1: USB disconnect, device number 93 [ 509.951920][T12576] loop8: detected capacity change from 0 to 7 [ 509.958250][T12576] Dev loop8: unable to read RDB block 7 [ 509.958294][T12576] loop8: unable to read partition table [ 509.963022][T12576] loop8: partition table beyond EOD, truncated [ 509.963057][T12576] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 509.995197][T12576] netlink: 'syz.2.1979': attribute type 9 has an invalid length. [ 510.469686][ T5713] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 510.621871][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 510.626264][ T5713] usb 3-1: unable to get BOS descriptor or descriptor too short [ 510.626325][ T5713] usb 3-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 510.633256][ T5713] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 510.640221][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 510.640248][T12588] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1982'. [ 510.686508][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.686541][ T5713] usb 3-1: Product: syz [ 510.686556][ T5713] usb 3-1: Manufacturer: syz [ 510.686572][ T5713] usb 3-1: SerialNumber: syz [ 510.942486][ T5713] usb 3-1: Invalid number of CPorts: 0 [ 510.942526][ T5713] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 511.005376][T12590] program syz.1.1983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.147688][ T5733] usb 3-1: USB disconnect, device number 96 [ 511.299667][ T5713] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 511.449654][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 511.456195][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 511.456252][ T5713] usb 2-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 511.459748][ T5713] usb 2-1: config 1 has an invalid interface number: 82 but max is 2 [ 511.459773][ T5713] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 511.459793][ T5713] usb 2-1: config 1 has no interface number 3 [ 511.459870][ T5713] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 511.459906][ T5713] usb 2-1: config 1 interface 82 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 511.459941][ T5713] usb 2-1: config 1 interface 2 has no altsetting 0 [ 511.465166][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.465189][ T5713] usb 2-1: Product: syz [ 511.465202][ T5713] usb 2-1: Manufacturer: syz [ 511.465216][ T5713] usb 2-1: SerialNumber: syz [ 511.686603][ T5713] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 511.688715][ T5713] usb 2-1: selecting invalid altsetting 0 [ 511.688740][ T5713] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 511.688759][ T5713] usb 2-1: selecting invalid altsetting 0 [ 511.919789][ T5713] usb 2-1: USB disconnect, device number 89 [ 512.569877][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1986'. [ 513.224804][T12609] FAULT_INJECTION: forcing a failure. [ 513.224804][T12609] name failslab, interval 1, probability 0, space 0, times 0 [ 513.224842][T12609] CPU: 1 UID: 0 PID: 12609 Comm: syz.0.1991 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.224871][T12609] Tainted: [L]=SOFTLOCKUP [ 513.224879][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 513.224898][T12609] Call Trace: [ 513.224907][T12609] [ 513.224916][T12609] dump_stack_lvl+0xe8/0x150 [ 513.224957][T12609] should_fail_ex+0x3eb/0x540 [ 513.224990][T12609] should_failslab+0xa8/0x100 [ 513.225022][T12609] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 513.225046][T12609] kmem_cache_alloc_noprof+0x9c/0x600 [ 513.225071][T12609] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 513.225097][T12609] ? kmem_cache_alloc_noprof+0x151/0x600 [ 513.225122][T12609] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 513.225154][T12609] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 513.225191][T12609] mmu_topup_memory_caches+0x21/0x1a0 [ 513.225220][T12609] kvm_mmu_load+0x9d/0x21e0 [ 513.225250][T12609] ? kvm_msr_allowed+0x9a/0x490 [ 513.225275][T12609] ? kvm_msr_allowed+0x9a/0x490 [ 513.225300][T12609] ? kvm_msr_allowed+0x9a/0x490 [ 513.225323][T12609] ? kvm_msr_allowed+0x3f4/0x490 [ 513.225347][T12609] ? kvm_msr_allowed+0x9a/0x490 [ 513.225371][T12609] ? kvm_apic_has_interrupt+0x740/0x770 [ 513.225418][T12609] vcpu_run+0x4f5b/0x7a90 [ 513.225530][T12609] ? __pfx_vcpu_run+0x10/0x10 [ 513.225555][T12609] ? lock_acquire+0x115/0x350 [ 513.225588][T12609] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 513.225620][T12609] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 513.225652][T12609] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 513.225682][T12609] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 513.225708][T12609] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 513.225742][T12609] kvm_vcpu_ioctl+0xa61/0xfd0 [ 513.225775][T12609] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 513.225825][T12609] ? __fget_files+0x2a/0x420 [ 513.225854][T12609] ? __fget_files+0x2a/0x420 [ 513.225880][T12609] ? __fget_files+0x2a/0x420 [ 513.225920][T12609] ? bpf_lsm_file_ioctl+0x9/0x20 [ 513.225950][T12609] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 513.225976][T12609] __se_sys_ioctl+0xfc/0x170 [ 513.226012][T12609] do_syscall_64+0x16a/0x530 [ 513.226041][T12609] ? trace_irq_disable+0x3b/0x140 [ 513.226070][T12609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.226091][T12609] ? clear_bhb_loop+0x70/0xc0 [ 513.226118][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.226139][T12609] RIP: 0033:0x7fe8b89a94d9 [ 513.226160][T12609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.226179][T12609] RSP: 002b:00007fe8b9865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.226203][T12609] RAX: ffffffffffffffda RBX: 00007fe8b8c25fa0 RCX: 00007fe8b89a94d9 [ 513.226219][T12609] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 513.226232][T12609] RBP: 00007fe8b9865090 R08: 0000000000000000 R09: 0000000000000000 [ 513.226245][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.226258][T12609] R13: 00007fe8b8c26038 R14: 00007fe8b8c25fa0 R15: 00007fe8b8d4fa48 [ 513.226295][T12609] [ 513.279742][ T11] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 513.464361][ T11] usb 4-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 513.477714][ T11] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 513.477741][ T11] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 513.477794][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.943194][T12626] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1995'. [ 514.053598][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1996'. [ 514.053627][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1996'. [ 514.053643][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 514.106429][T12629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.106935][T12629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.182140][T12630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1996'. [ 514.182172][T12630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1996'. [ 514.182188][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 514.513283][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1998'. [ 515.159438][ T5733] usb 4-1: USB disconnect, device number 94 [ 515.555786][T12664] FAULT_INJECTION: forcing a failure. [ 515.555786][T12664] name failslab, interval 1, probability 0, space 0, times 0 [ 515.555823][T12664] CPU: 0 UID: 0 PID: 12664 Comm: syz.4.2006 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.555853][T12664] Tainted: [L]=SOFTLOCKUP [ 515.555860][T12664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 515.555873][T12664] Call Trace: [ 515.555882][T12664] [ 515.555891][T12664] dump_stack_lvl+0xe8/0x150 [ 515.555934][T12664] should_fail_ex+0x3eb/0x540 [ 515.555971][T12664] should_failslab+0xa8/0x100 [ 515.556005][T12664] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 515.556030][T12664] kmem_cache_alloc_noprof+0x9c/0x600 [ 515.556055][T12664] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 515.556076][T12664] ? kmem_cache_alloc_noprof+0x151/0x600 [ 515.556101][T12664] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 515.556134][T12664] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 515.556171][T12664] mmu_topup_memory_caches+0x21/0x1a0 [ 515.556202][T12664] kvm_mmu_load+0x9d/0x21e0 [ 515.556230][T12664] ? kvm_msr_allowed+0x9a/0x490 [ 515.556263][T12664] ? kvm_msr_allowed+0x9a/0x490 [ 515.556289][T12664] ? kvm_msr_allowed+0x9a/0x490 [ 515.556313][T12664] ? kvm_msr_allowed+0x3f4/0x490 [ 515.556337][T12664] ? kvm_msr_allowed+0x9a/0x490 [ 515.556362][T12664] ? kvm_apic_has_interrupt+0x740/0x770 [ 515.556409][T12664] vcpu_run+0x4f5b/0x7a90 [ 515.556519][T12664] ? __pfx_vcpu_run+0x10/0x10 [ 515.556545][T12664] ? lock_acquire+0x115/0x350 [ 515.556580][T12664] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 515.556612][T12664] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 515.556643][T12664] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 515.556671][T12664] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 515.556697][T12664] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 515.556731][T12664] kvm_vcpu_ioctl+0xa61/0xfd0 [ 515.556764][T12664] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 515.556815][T12664] ? __fget_files+0x2a/0x420 [ 515.556846][T12664] ? __fget_files+0x2a/0x420 [ 515.556872][T12664] ? __fget_files+0x2a/0x420 [ 515.556903][T12664] ? bpf_lsm_file_ioctl+0x9/0x20 [ 515.556934][T12664] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 515.556961][T12664] __se_sys_ioctl+0xfc/0x170 [ 515.556996][T12664] do_syscall_64+0x16a/0x530 [ 515.557025][T12664] ? trace_irq_disable+0x3b/0x140 [ 515.557053][T12664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.557075][T12664] ? clear_bhb_loop+0x70/0xc0 [ 515.557101][T12664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.557122][T12664] RIP: 0033:0x7ffb6b1a94d9 [ 515.557142][T12664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.557160][T12664] RSP: 002b:00007ffb6c069028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.557184][T12664] RAX: ffffffffffffffda RBX: 00007ffb6b425fa0 RCX: 00007ffb6b1a94d9 [ 515.557199][T12664] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 515.557212][T12664] RBP: 00007ffb6c069090 R08: 0000000000000000 R09: 0000000000000000 [ 515.557226][T12664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.557239][T12664] R13: 00007ffb6b426038 R14: 00007ffb6b425fa0 R15: 00007ffb6b54fa48 [ 515.557283][T12664] [ 515.589648][ T5713] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 515.763116][ T5713] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 515.764120][ T5713] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 515.764142][ T5713] usb 3-1: config 1 has no interface number 0 [ 515.769597][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.769623][ T5713] usb 3-1: Product: syz [ 515.769637][ T5713] usb 3-1: Manufacturer: syz [ 515.769651][ T5713] usb 3-1: SerialNumber: syz [ 515.816564][ T5713] usb 3-1: 3:0 : does not exist [ 515.816587][ T5713] usb 3-1: 3:0 : does not exist [ 516.132456][T12670] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2007'. [ 516.166247][T12672] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2008'. [ 516.184795][ T5713] usb 3-1: USB disconnect, device number 97 [ 516.276036][T12676] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 516.284141][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.286191][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.298072][T12675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.298513][T12675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.368294][T12098] udevd[12098]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.769799][ T5713] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 516.931138][ T5713] usb 4-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 516.932538][ T5713] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 516.932565][ T5713] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 516.932606][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.139608][ T30] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 517.293334][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 517.294083][ T30] usb 2-1: not running at top speed; connect to a high speed hub [ 517.294119][ T30] usb 2-1: New USB device found: idVendor=1235, idProduct=0018, bcdDevice=0.40 [ 517.296468][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.296493][ T30] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.296515][ T30] usb 2-1: config 1 has no interface number 0 [ 517.326691][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.326723][ T30] usb 2-1: Product: syz [ 517.326739][ T30] usb 2-1: Manufacturer: syz [ 517.326753][ T30] usb 2-1: SerialNumber: syz [ 517.502246][T12705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.504578][T12705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.599261][ T30] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.718851][ T30] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 517.733408][ T30] usb 2-1: USB disconnect, device number 90 [ 517.769209][T12098] udevd[12098]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.365077][T12718] netlink: 'syz.1.2022': attribute type 5 has an invalid length. [ 519.365102][T12718] __nla_validate_parse: 2 callbacks suppressed [ 519.365114][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2022'. [ 519.466713][T12720] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2023'. [ 519.528249][T12724] loop5: detected capacity change from 0 to 7 [ 519.544697][T12724] Dev loop5: unable to read RDB block 7 [ 519.544771][T12724] loop5: unable to read partition table [ 519.545001][T12724] loop5: partition table beyond EOD, truncated [ 519.545031][T12724] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 519.607088][ T11] usb 4-1: USB disconnect, device number 95 [ 519.790282][ T5713] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 519.961651][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 519.962114][ T5713] usb 2-1: not running at top speed; connect to a high speed hub [ 519.962151][ T5713] usb 2-1: New USB device found: idVendor=17cc, idProduct=1011, bcdDevice=0.40 [ 519.966262][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.966292][ T5713] usb 2-1: Product: ﰫꉏ鸠ᦼ⤍滁⹓珲㌾睊㔁Ỵ췬牫臓᡾좲佥뽛魼ↄ⻘ﰷ괳볁ꔝ윊洞煸냋⤮횻㉏㻍ﶦᕇ뒉葞钢ෟ놜䪕䘲洉퇐䇯鳚Ⲟ᫃蚮 [ 519.966309][ T5713] usb 2-1: Manufacturer: 䀁 [ 519.966318][ T5713] usb 2-1: SerialNumber: Ё [ 520.149688][ T5733] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 520.191562][ T5713] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 520.192498][ T5713] usb 2-1: incorrect wMaxPacketSize 0x10 for BADD profile [ 520.301469][ T5713] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 520.301516][ T5733] usb 4-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 520.303063][ T5733] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 520.303094][ T5733] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 520.303121][ T5733] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 520.305520][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.305540][ T5733] usb 4-1: Product: syz [ 520.305552][ T5733] usb 4-1: Manufacturer: syz [ 520.305563][ T5733] usb 4-1: SerialNumber: syz [ 520.387961][T12741] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 520.399803][T12747] netlink: 'syz.2.2034': attribute type 10 has an invalid length. [ 520.400372][T12747] tipc: Resetting bearer [ 520.402607][ T5733] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 520.413816][ T5713] usb 2-1: USB disconnect, device number 91 [ 520.437192][T12747] syz_tun: entered promiscuous mode [ 520.455821][ T5733] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 520.529710][T12098] udevd[12098]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.533804][ T5733] scsi host1: usb-storage 4-1:1.0 [ 520.673622][ T5733] usb 4-1: USB disconnect, device number 96 [ 520.673757][ C1] input input33: can't resubmit intr, dummy_hcd.3-1/input0, retval -19 [ 520.898943][T12759] syzkaller0: entered promiscuous mode [ 520.898958][T12759] syzkaller0: entered allmulticast mode [ 521.034666][T12756] netlink: 'syz.0.2035': attribute type 10 has an invalid length. [ 521.130944][ T31] kauditd_printk_skb: 139 callbacks suppressed [ 521.130965][ T31] audit: type=1800 audit(1794616465.131:1108): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2037" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 521.459970][ T5733] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 521.611319][ T5733] usb 4-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 521.612252][ T5733] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 521.612273][ T5733] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 521.612304][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.172671][T12772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.173033][T12772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.914344][T12785] ip6gre1: entered promiscuous mode [ 522.914374][T12785] ip6gre1: entered allmulticast mode [ 522.917046][ T8350] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.917160][ T8350] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.946487][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.963534][T12785] netlink: 'syz.4.2045': attribute type 1 has an invalid length. [ 523.249833][ T5733] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 523.286477][T12798] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2050'. [ 523.400200][ T5733] usb 2-1: New USB device found: idVendor=05ac, idProduct=0238, bcdDevice=0.40 [ 523.402182][ T5733] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 523.402198][ T5733] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.404532][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.404546][ T5733] usb 2-1: Product: syz [ 523.404554][ T5733] usb 2-1: Manufacturer: syz [ 523.404561][ T5733] usb 2-1: SerialNumber: syz [ 523.430212][ T5733] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input34 [ 523.489810][ T5713] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.880607][ T5713] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 524.201321][ T5733] bcm5974 2-1:1.0: could not read from device [ 524.243512][ T4986] bcm5974 2-1:1.0: could not read from device [ 524.292863][ T5733] input: failed to attach handler mousedev to device input34, error: -5 [ 524.313267][ T4986] bcm5974 2-1:1.0: could not read from device [ 524.325656][ T5733] usb 2-1: USB disconnect, device number 92 [ 524.362456][ T5713] usb 4-1: USB disconnect, device number 97 [ 524.495178][T12828] input: syz0 as /devices/virtual/input/input35 [ 524.611400][T12831] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2063'. [ 524.611673][T12831] 0: renamed from hsr0 [ 524.617103][T12831] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 524.617133][T12831] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.618002][T12831] 0: entered allmulticast mode [ 524.618025][T12831] hsr_slave_0: entered allmulticast mode [ 524.618046][T12831] hsr_slave_1: entered allmulticast mode [ 524.618703][T12831] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 524.816040][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2064'. [ 524.820002][ T5733] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 524.893090][T12838] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 524.894601][T12838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2065'. [ 524.949692][ T5733] usb 2-1: device descriptor read/64, error -71 [ 525.189641][ T5733] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 525.319771][ T5733] usb 2-1: device descriptor read/64, error -71 [ 525.416771][T12852] FAULT_INJECTION: forcing a failure. [ 525.416771][T12852] name failslab, interval 1, probability 0, space 0, times 0 [ 525.416792][T12852] CPU: 0 UID: 0 PID: 12852 Comm: syz.2.2071 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.416806][T12852] Tainted: [L]=SOFTLOCKUP [ 525.416810][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 525.416816][T12852] Call Trace: [ 525.416821][T12852] [ 525.416826][T12852] dump_stack_lvl+0xe8/0x150 [ 525.416848][T12852] should_fail_ex+0x3eb/0x540 [ 525.416863][T12852] ? __alloc_skb+0x1db/0x7a0 [ 525.416963][T12852] should_failslab+0xa8/0x100 [ 525.416981][T12852] ? __alloc_skb+0x1db/0x7a0 [ 525.416989][T12852] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 525.417002][T12852] ? __alloc_skb+0x18d/0x7a0 [ 525.417011][T12852] ? __alloc_skb+0x1db/0x7a0 [ 525.417024][T12852] __alloc_skb+0x1db/0x7a0 [ 525.417036][T12852] netlink_sendmsg+0x5cd/0xb20 [ 525.417082][T12852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.417090][T12852] ? __lock_acquire+0x747/0x2de0 [ 525.417105][T12852] ? aa_sock_msg_perm+0x144/0x210 [ 525.417137][T12852] ? apparmor_socket_sendmsg+0x98/0x360 [ 525.417152][T12852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.417161][T12852] sock_sendmsg_nosec+0x14e/0x190 [ 525.417188][T12852] ____sys_sendmsg+0x49f/0x790 [ 525.417204][T12852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.417219][T12852] ? import_iovec+0x73/0xa0 [ 525.417235][T12852] ___sys_sendmsg+0x2f8/0x3d0 [ 525.417245][T12852] ? __lock_acquire+0x747/0x2de0 [ 525.417260][T12852] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.417286][T12852] ? __fget_files+0x3a2/0x420 [ 525.417299][T12852] ? __fget_files+0x2a/0x420 [ 525.417315][T12852] __x64_sys_sendmsg+0x1b1/0x290 [ 525.417328][T12852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.417349][T12852] do_syscall_64+0x16a/0x530 [ 525.417362][T12852] ? trace_irq_disable+0x3b/0x140 [ 525.417380][T12852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.417391][T12852] ? clear_bhb_loop+0x70/0xc0 [ 525.417403][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.417413][T12852] RIP: 0033:0x7f7c673a94d9 [ 525.417424][T12852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.417432][T12852] RSP: 002b:00007f7c68222028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.417445][T12852] RAX: ffffffffffffffda RBX: 00007f7c67625fa0 RCX: 00007f7c673a94d9 [ 525.417453][T12852] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 525.417459][T12852] RBP: 00007f7c68222090 R08: 0000000000000000 R09: 0000000000000000 [ 525.417465][T12852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.417472][T12852] R13: 00007f7c67626038 R14: 00007f7c67625fa0 R15: 00007f7c6774fa48 [ 525.417486][T12852] [ 525.430071][ T5733] usb usb2-port1: attempt power cycle [ 525.769950][ T5733] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 525.800841][ T5733] usb 2-1: device descriptor read/8, error -71 [ 525.801948][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'. [ 525.949612][ T30] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 526.040019][ T5733] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 526.060417][ T5733] usb 2-1: device descriptor read/8, error -71 [ 526.101146][ T30] usb 3-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 526.102129][ T30] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 526.102149][ T30] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 526.102161][ T30] usb 3-1: config 4 has no interface number 0 [ 526.102186][ T30] usb 3-1: config 4 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.102214][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.107681][ T30] hub 3-1:4.128: bad descriptor, ignoring hub [ 526.107712][ T30] hub 3-1:4.128: probe with driver hub failed with error -5 [ 526.180643][ T5733] usb usb2-port1: unable to enumerate USB device [ 526.182107][ T30] usbhid 3-1:4.128: couldn't find an input interrupt endpoint [ 526.249770][ T5715] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 526.307572][T12856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.307998][T12856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.410370][ T5715] usb 4-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 526.411451][ T5715] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.411466][ T5715] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 526.412982][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.412994][ T5715] usb 4-1: Product: syz [ 526.413002][ T5715] usb 4-1: Manufacturer: syz [ 526.413009][ T5715] usb 4-1: SerialNumber: syz [ 526.418693][ T5715] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 526.431764][ T5715] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 526.431764][ T5715] Please send a copy of this message to and [ 526.819200][T12858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.823006][T12858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.835773][T12858] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2073'. [ 526.836189][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.844087][T12858] syzkaller1: entered promiscuous mode [ 526.844108][T12858] syzkaller1: entered allmulticast mode [ 527.461480][ T5715] scsi host1: usb-storage 4-1:1.0 [ 527.624260][ T25] usb 4-1: USB disconnect, device number 98 [ 527.939668][ T5715] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 527.985062][T12879] FAULT_INJECTION: forcing a failure. [ 527.985062][T12879] name failslab, interval 1, probability 0, space 0, times 0 [ 527.985084][T12879] CPU: 0 UID: 0 PID: 12879 Comm: syz.4.2080 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.985098][T12879] Tainted: [L]=SOFTLOCKUP [ 527.985102][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 527.985108][T12879] Call Trace: [ 527.985112][T12879] [ 527.985117][T12879] dump_stack_lvl+0xe8/0x150 [ 527.985140][T12879] should_fail_ex+0x3eb/0x540 [ 527.985154][T12879] ? __alloc_skb+0x1db/0x7a0 [ 527.985166][T12879] should_failslab+0xa8/0x100 [ 527.985183][T12879] ? __alloc_skb+0x1db/0x7a0 [ 527.985192][T12879] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 527.985204][T12879] ? __alloc_skb+0x18d/0x7a0 [ 527.985214][T12879] ? __alloc_skb+0x1db/0x7a0 [ 527.985226][T12879] __alloc_skb+0x1db/0x7a0 [ 527.985238][T12879] netlink_sendmsg+0x5cd/0xb20 [ 527.985251][T12879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.985260][T12879] ? __lock_acquire+0x747/0x2de0 [ 527.985274][T12879] ? aa_sock_msg_perm+0x144/0x210 [ 527.985292][T12879] ? apparmor_socket_sendmsg+0x98/0x360 [ 527.985307][T12879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.985316][T12879] sock_sendmsg_nosec+0x14e/0x190 [ 527.985332][T12879] ____sys_sendmsg+0x49f/0x790 [ 527.985347][T12879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.985365][T12879] ? import_iovec+0x73/0xa0 [ 527.985379][T12879] ___sys_sendmsg+0x2f8/0x3d0 [ 527.985389][T12879] ? __lock_acquire+0x747/0x2de0 [ 527.985404][T12879] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.985430][T12879] ? __fget_files+0x3a2/0x420 [ 527.985443][T12879] ? __fget_files+0x2a/0x420 [ 527.985459][T12879] __x64_sys_sendmsg+0x1b1/0x290 [ 527.985471][T12879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.985492][T12879] do_syscall_64+0x16a/0x530 [ 527.985507][T12879] ? trace_irq_disable+0x3b/0x140 [ 527.985521][T12879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.985532][T12879] ? clear_bhb_loop+0x70/0xc0 [ 527.985543][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.985557][T12879] RIP: 0033:0x7ffb6b1a94d9 [ 527.985572][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.985586][T12879] RSP: 002b:00007ffb6c069028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.985603][T12879] RAX: ffffffffffffffda RBX: 00007ffb6b425fa0 RCX: 00007ffb6b1a94d9 [ 527.985615][T12879] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000009 [ 527.985625][T12879] RBP: 00007ffb6c069090 R08: 0000000000000000 R09: 0000000000000000 [ 527.985635][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.985645][T12879] R13: 00007ffb6b426038 R14: 00007ffb6b425fa0 R15: 00007ffb6b54fa48 [ 527.985667][T12879] [ 528.125209][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 528.155276][ T5715] usb 2-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 528.203302][ T5715] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.203343][ T5715] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.203366][ T5715] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 528.203393][ T5715] usb 2-1: config 0 interface 0 has no altsetting 0 [ 528.203435][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.341736][ T5715] usb 2-1: config 0 descriptor?? [ 528.748915][T12869] netlink: 'syz.1.2075': attribute type 20 has an invalid length. [ 528.763388][ T5715] hid (null): unknown global tag 0xd [ 528.765483][ T5715] hid (null): report_id 369980277 is invalid [ 528.766078][ T5715] hid (null): invalid report_size 25453 [ 528.767076][ T5715] hid (null): unknown global tag 0x15 [ 528.769932][ T25] usb 3-1: USB disconnect, device number 98 [ 528.773045][ T5733] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 528.923151][ T5733] usb 4-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00 [ 528.924110][ T5733] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.924132][ T5733] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.924146][ T5733] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.924161][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0 [ 528.924182][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.925854][ T5733] usb 4-1: config 0 descriptor?? [ 528.998512][T12869] batadv1: entered promiscuous mode [ 528.998543][T12869] batadv1: entered allmulticast mode [ 529.115285][ T25] usb 2-1: USB disconnect, device number 97 [ 529.140022][T12902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.140496][T12902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.180131][ T5733] sony 0003:054C:042F.001F: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 529.184631][ T5733] sony 0003:054C:042F.001F: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.3-1/input0 [ 529.184651][ T5733] sony 0003:054C:042F.001F: failed to claim input [ 529.668600][T12915] netlink: 'syz.2.2091': attribute type 10 has an invalid length. [ 531.109631][ T25] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 531.260481][ T25] usb 2-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 531.261666][ T25] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 531.261680][ T25] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 531.261690][ T25] usb 2-1: config 4 has no interface number 0 [ 531.261709][ T25] usb 2-1: config 4 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.261730][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.268690][ T25] hub 2-1:4.128: bad descriptor, ignoring hub [ 531.268706][ T25] hub 2-1:4.128: probe with driver hub failed with error -5 [ 531.274028][ T25] usbhid 2-1:4.128: couldn't find an input interrupt endpoint [ 531.474637][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.474932][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.542115][ T25] usb 4-1: USB disconnect, device number 99 [ 532.629947][ T30] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 532.780680][ T30] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 532.781864][ T30] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 532.781892][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.781912][ T30] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 532.781962][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.784010][ T30] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 532.784036][ T30] usb 4-1: Product: syz [ 532.784051][ T30] usb 4-1: Manufacturer: syz [ 532.794648][ T30] cdc_wdm 4-1:1.0: skipping garbage [ 532.794668][ T30] cdc_wdm 4-1:1.0: skipping garbage [ 532.794751][ T30] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 532.989666][ T5715] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 533.046568][ T30] usb 4-1: USB disconnect, device number 100 [ 533.139904][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 533.142207][ T5715] usb 3-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 533.143770][ T5715] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 533.147746][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.147770][ T5715] usb 3-1: Product: syz [ 533.147780][ T5715] usb 3-1: Manufacturer: syz [ 533.147789][ T5715] usb 3-1: SerialNumber: syz [ 533.149773][ T5715] usb 3-1: config 0 descriptor?? [ 533.170165][T12958] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 533.211792][ T5715] hub 3-1:0.0: bad descriptor, ignoring hub [ 533.211823][ T5715] hub 3-1:0.0: probe with driver hub failed with error -5 [ 533.217269][ T5715] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37 [ 533.418848][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.423099][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.460304][ T30] usb 3-1: USB disconnect, device number 99 [ 533.460345][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 533.857384][T12975] kvm [12973]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 533.857467][T12975] kvm [12973]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 533.885184][T12975] kvm [12973]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 533.912177][T12975] kvm [12973]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 533.912248][T12975] kvm [12973]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 534.067421][ T30] usb 2-1: USB disconnect, device number 98 [ 534.410646][T12991] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 534.410663][T12991] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2118'. [ 534.420232][ T30] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 534.490588][T12987] ------------[ cut here ]------------ [ 534.490600][T12987] !(flags & __GFP_NOWARN) [ 534.490606][T12987] WARNING: mm/slub.c:7144 at __kvmalloc_node_noprof+0x793/0x820, CPU#1: syz.2.2116/12987 [ 534.510609][T12987] Modules linked in: [ 534.514536][T12987] CPU: 1 UID: 0 PID: 12987 Comm: syz.2.2116 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.519760][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 534.533365][T12987] Tainted: [L]=SOFTLOCKUP [ 534.537684][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 534.547927][T12987] RIP: 0010:__kvmalloc_node_noprof+0x793/0x820 [ 534.554318][T12987] Code: ff 48 c7 c7 b0 b9 29 90 48 89 de e8 47 9f f8 02 e9 1b fc ff ff 48 c7 c7 f0 b9 29 90 48 89 de e8 33 9f f8 02 e9 4c fc ff ff 90 <0f> 0b 90 31 db e9 06 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 7f [ 534.574057][T12987] RSP: 0018:ffffc9000ac47ae0 EFLAGS: 00010246 [ 534.580635][T12987] RAX: 0000000000000100 RBX: 0000000000000000 RCX: 8000000000000001 [ 534.588596][T12987] RDX: 0000008000000000 RSI: ffffffff8c8e9860 RDI: ffffffff8c8e9820 [ 534.596990][T12987] RBP: 00000000ffffffff R08: 00000000000028c0 R09: 00000000ffffffff [ 534.605061][T12987] R10: 0000000000000008 R11: ffffffff81b3b320 R12: 0000008000000000 [ 534.613229][T12987] R13: 00000000000028c0 R14: 0000001000000000 R15: ffffffff866c0c29 [ 534.621250][T12987] FS: 00007f7c682226c0(0000) GS:ffff888123508000(0000) knlGS:0000000000000000 [ 534.630202][T12987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.636770][T12987] CR2: 00007fe8b8bf7158 CR3: 00000000526b4000 CR4: 00000000003526f0 [ 534.644936][T12987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000f1ffffdf [ 534.653021][T12987] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 534.661034][T12987] Call Trace: [ 534.664308][T12987] [ 534.667236][T12987] ? __kmalloc_cache_noprof+0x31c/0x600 [ 534.673044][T12987] ? udmabuf_create+0xd1/0xf10 [ 534.677852][T12987] ? udmabuf_create+0x2d9/0xf10 [ 534.683168][T12987] udmabuf_create+0x2d9/0xf10 [ 534.687862][T12987] ? tomoyo_path_number_perm+0x219/0x5f0 [ 534.693827][T12987] ? do_vfs_ioctl+0x11a7/0x1570 [ 534.698701][T12987] ? lock_acquire+0x115/0x350 [ 534.703620][T12987] ? __pfx_udmabuf_create+0x10/0x10 [ 534.708864][T12987] ? __might_fault+0xaf/0x130 [ 534.713636][T12987] udmabuf_ioctl+0x1f3/0x300 [ 534.718314][T12987] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 534.723482][T12987] ? __fget_files+0x2a/0x420 [ 534.728079][T12987] ? __fget_files+0x2a/0x420 [ 534.732963][T12987] ? bpf_lsm_file_ioctl+0x9/0x20 [ 534.737926][T12987] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 534.743109][T12987] __se_sys_ioctl+0xfc/0x170 [ 534.747705][T12987] do_syscall_64+0x16a/0x530 [ 534.752511][T12987] ? trace_irq_disable+0x3b/0x140 [ 534.757538][T12987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.763794][T12987] ? clear_bhb_loop+0x70/0xc0 [ 534.768468][T12987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.774438][T12987] RIP: 0033:0x7f7c673a94d9 [ 534.778850][T12987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.799080][T12987] RSP: 002b:00007f7c68222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.807832][T12987] RAX: ffffffffffffffda RBX: 00007f7c67625fa0 RCX: 00007f7c673a94d9 [ 534.815884][T12987] RDX: 0000200000000440 RSI: 0000000040187542 RDI: 0000000000000006 [ 534.824050][T12987] RBP: 00007f7c6743804e R08: 0000000000000000 R09: 0000000000000000 [ 534.832108][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.840144][T12987] R13: 00007f7c67626038 R14: 00007f7c67625fa0 R15: 00007f7c6774fa48 [ 534.848130][T12987] [ 534.851351][T12987] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 534.858640][T12987] CPU: 1 UID: 0 PID: 12987 Comm: syz.2.2116 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.869575][T12987] Tainted: [L]=SOFTLOCKUP [ 534.873915][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 534.883998][T12987] Call Trace: [ 534.887311][T12987] [ 534.890272][T12987] vpanic+0x26f/0x710 [ 534.894295][T12987] panic+0xc5/0xd0 [ 534.898050][T12987] ? __pfx_panic+0x10/0x10 [ 534.902517][T12987] __warn+0x315/0x4c0 [ 534.906525][T12987] ? __kvmalloc_node_noprof+0x793/0x820 [ 534.912140][T12987] ? __kvmalloc_node_noprof+0x793/0x820 [ 534.917730][T12987] __report_bug+0x276/0x570 [ 534.922294][T12987] ? __kvmalloc_node_noprof+0x793/0x820 [ 534.927862][T12987] ? __pfx___report_bug+0x10/0x10 [ 534.932898][T12987] ? __kvmalloc_node_noprof+0x793/0x820 [ 534.938538][T12987] report_bug+0x16b/0x220 [ 534.942958][T12987] ? __kvmalloc_node_noprof+0x793/0x820 [ 534.948513][T12987] ? __kvmalloc_node_noprof+0x795/0x820 [ 534.954055][T12987] handle_bug+0x9c/0x200 [ 534.958297][T12987] exc_invalid_op+0x1a/0x50 [ 534.962826][T12987] asm_exc_invalid_op+0x1a/0x20 [ 534.967680][T12987] RIP: 0010:__kvmalloc_node_noprof+0x793/0x820 [ 534.973835][T12987] Code: ff 48 c7 c7 b0 b9 29 90 48 89 de e8 47 9f f8 02 e9 1b fc ff ff 48 c7 c7 f0 b9 29 90 48 89 de e8 33 9f f8 02 e9 4c fc ff ff 90 <0f> 0b 90 31 db e9 06 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 7f [ 534.993519][T12987] RSP: 0018:ffffc9000ac47ae0 EFLAGS: 00010246 [ 534.999588][T12987] RAX: 0000000000000100 RBX: 0000000000000000 RCX: 8000000000000001 [ 535.007652][T12987] RDX: 0000008000000000 RSI: ffffffff8c8e9860 RDI: ffffffff8c8e9820 [ 535.015622][T12987] RBP: 00000000ffffffff R08: 00000000000028c0 R09: 00000000ffffffff [ 535.023586][T12987] R10: 0000000000000008 R11: ffffffff81b3b320 R12: 0000008000000000 [ 535.031556][T12987] R13: 00000000000028c0 R14: 0000001000000000 R15: ffffffff866c0c29 [ 535.039526][T12987] ? udmabuf_create+0x2d9/0xf10 [ 535.044382][T12987] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 535.050541][T12987] ? __kmalloc_cache_noprof+0x31c/0x600 [ 535.056089][T12987] ? udmabuf_create+0xd1/0xf10 [ 535.060851][T12987] ? udmabuf_create+0x2d9/0xf10 [ 535.065706][T12987] udmabuf_create+0x2d9/0xf10 [ 535.070384][T12987] ? tomoyo_path_number_perm+0x219/0x5f0 [ 535.076024][T12987] ? do_vfs_ioctl+0x11a7/0x1570 [ 535.080902][T12987] ? lock_acquire+0x115/0x350 [ 535.085585][T12987] ? __pfx_udmabuf_create+0x10/0x10 [ 535.090787][T12987] ? __might_fault+0xaf/0x130 [ 535.095466][T12987] udmabuf_ioctl+0x1f3/0x300 [ 535.100059][T12987] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 535.105177][T12987] ? __fget_files+0x2a/0x420 [ 535.109792][T12987] ? __fget_files+0x2a/0x420 [ 535.114401][T12987] ? bpf_lsm_file_ioctl+0x9/0x20 [ 535.119340][T12987] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 535.124461][T12987] __se_sys_ioctl+0xfc/0x170 [ 535.129074][T12987] do_syscall_64+0x16a/0x530 [ 535.133679][T12987] ? trace_irq_disable+0x3b/0x140 [ 535.138718][T12987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.144786][T12987] ? clear_bhb_loop+0x70/0xc0 [ 535.149463][T12987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.155365][T12987] RIP: 0033:0x7f7c673a94d9 [ 535.159779][T12987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.179477][T12987] RSP: 002b:00007f7c68222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.187896][T12987] RAX: ffffffffffffffda RBX: 00007f7c67625fa0 RCX: 00007f7c673a94d9 [ 535.195850][T12987] RDX: 0000200000000440 RSI: 0000000040187542 RDI: 0000000000000006 [ 535.203837][T12987] RBP: 00007f7c6743804e R08: 0000000000000000 R09: 0000000000000000 [ 535.211812][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.219793][T12987] R13: 00007f7c67626038 R14: 00007f7c67625fa0 R15: 00007f7c6774fa48 [ 535.227784][T12987] [ 535.230947][T12987] Kernel Offset: disabled [ 535.235267][T12987] Rebooting in 86400 seconds..