last executing test programs: 8.207918061s ago: executing program 4 (id=710): socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x20000000, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 7.737602152s ago: executing program 4 (id=712): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x940c, 0x3002, 0x160, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x84, 0x81, 0x2, 0x19}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xfffe], 0x3, 0x2, 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0xffffffff, 0xff, 0xff], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x81, 0x7, 0x33dd, 0x80000000}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff000000, 0xff, 0x0, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'virt_wifi0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x70}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip6gre0\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x1d, 0x7, 0x1, 0x0, "699d92dc9fd264507cda877def7e908a1688e9100ed3956433"}]}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x49, 0x6, "20664043b110ff82f736e801787c72ea5b8ddd577bd5f9f7bb501bce7a33e07dba20b1482cc32c83698d57d2432ffb72438105c950a563f772da5d76dd9ee3f994f628db42"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7, 0x6, "cd5743"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0xbc, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xa14}, @NFTA_SET_EXPRESSIONS={0xa0, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_TTL={0x5, 0x2, 0xe2}]}}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_DELOBJ={0x160, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x78, 0x8, "50433837908efc3c2fc07c2d2a133acca75ed38f21f44b61c9aeb0c655b704aa5458372ae4286db8da0dd2e0be3e1a342272a8d1f0129bc69d2f261ce4b13d323cf554d2d3b542a84ed5e53a9e4c39edf99b862ff621cb4ef77556dccbd9101394d4f9126d214be874dae188368aa01c897f8606"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xa8, 0x8, "4073acae1edc8ed2452abd587b76f44f70341c8555b1a3cca5ad0d9b04becb4a755945e01d5893c0719689203bc251e0fbd410db3539abb3170f686ea5dd56a0d3aa17594dfb4e04f2d0eae8d077e4a89f37440482b28dca515ec1465f80e8e4b945702eb58d7b7fd8228df62970b36b065c85d20c0d86114f0e9f0261609b957632a664c69075fb9756b7dddefcc7fe4b7a7a0f586fd312192a3462422a23b0b144e201"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c0}, 0x1, 0x0, 0x0, 0x8000000}, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) 6.584558751s ago: executing program 1 (id=717): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x105, 0x0, 0x400000000000a, 0x4, 0x5, 0x2, 0xfffffffffffffffa, 0x80000000}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) r1 = syz_io_uring_setup(0x836, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8da83b9db035a58}, 0x0) ioctl(r6, 0x8936, &(0x7f0000000000)) r7 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000001980)={0x2, 0x7fff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000980)=""/4096}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0}) io_uring_enter(r1, 0x3514, 0x9141, 0x69, 0x0, 0x0) 5.889492974s ago: executing program 4 (id=721): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000000000b020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000001c0)={{0x30000, 0x1000, 0xc, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x2, 0x4, 0x7, 0x10}, {0x2, 0x1000, 0x3, 0x9, 0xf7, 0xb, 0x9, 0xa, 0x5, 0x0, 0x5, 0xc4}, {0xd000, 0x98ddb7fb0f345f3, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0xb000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x2, 0x3, 0xfc}, {0x2, 0x26000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x5, 0x5, 0x46, 0xe, 0x4b}, {0x1000, 0xd000, 0x0, 0x0, 0x6, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x21, 0x3}, {0xffff1000, 0xeeef0000, 0x8, 0x9d, 0xd, 0xfe, 0x0, 0xf, 0x3, 0x7, 0x0, 0xf8}, {0x100000, 0x40000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0x4000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xfffffffffeffff47, 0x401, 0x8, 0x5]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESHEX=r1, @ANYRESHEX=r10], 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000120fcff0700040000000100000804004880100001800c001080040008"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x3, 0x4, 0x6, 0xe, 0x3, 0x4b}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 5.756277821s ago: executing program 3 (id=723): socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x40000000, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 5.496812236s ago: executing program 3 (id=725): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="02060000000000000401"], 0x40) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0xf5}], 0x1, 0x0) 5.300792076s ago: executing program 3 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000780)="b9800000c00f3235000800000f300f09b9800000c00f3235000100000f30c74424003e000000c7442402b0000000ff2c24450f4a43000f205b66b8ce000f00d00f01c566bad004b000ee360f06", 0x4d}], 0x1, 0x11, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000001c0)="d7", 0x1}], 0x1}}], 0x3, 0x20044040) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r3, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2d}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x35}}, &(0x7f0000000bc0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.212596397s ago: executing program 1 (id=728): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000100)="0158bf8582b631dc550e90cbdebbd5b4ca0668d0ed377d545d2e5180fcbcc14fbc3c1f25068673b725cfae663e065ba56fe1564c554bfe7a88051d140efa7c203bf8d2c9f1db76c41043cddfc7cf67e1b751628eb622d29e9fc3413357c18130f34d48d12570f5ede35731ff1e90f2e874e6f3a12ef82aac046ee93f61af166570b2893256a6642a31baa8917a4ed218a59ce44eb6dcc860a04bfc6da57dc9bfcad014a7054fe30c16f3f2a70cc5", 0xae}], 0x1}}], 0x1, 0x240000d5) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000040)={0x43, 0x359f35d7abcd234}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r5 = dup(r4) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0xedd, 0x75, 0x2, 0x4010002, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) write$P9_RLERROR(r5, &(0x7f0000000040)={0xe, 0x7, 0x1, {0x5, 'cake\x00'}}, 0xe) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, 0x0) gettimeofday(&(0x7f0000000080), &(0x7f00000000c0)) 5.013912969s ago: executing program 1 (id=729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r4, 0x1, 0x4a, 0x0, &(0x7f0000000000)) (async, rerun: 32) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) (async) ioctl$SNDCTL_TMR_START(r5, 0x5402) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000600)=""/148, 0x94}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f0000002800)=""/103, 0x67}, {&(0x7f0000002880)=""/224, 0xe0}], 0x4, 0x4, 0x8) 4.388319937s ago: executing program 1 (id=731): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 4.354951816s ago: executing program 3 (id=732): socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @ioapic={0x5000, 0x8563, 0x9, 0xffff, 0x0, [{0x80, 0x7, 0x0, '\x00', 0x5}, {0x10, 0x1, 0xc, '\x00', 0xee}, {0x2, 0x4, 0x7, '\x00', 0x4}, {0x5, 0x9, 0x6}, {0x2d, 0x9, 0x5, '\x00', 0x5}, {0x0, 0x1, 0xa3}, {0x2, 0x8, 0x8, '\x00', 0x5}, {0xfb, 0x3, 0xfb, '\x00', 0x7}, {0x4, 0x2, 0x7, '\x00', 0x76}, {0xa5, 0x5e, 0x42, '\x00', 0x1}, {0x7, 0x5, 0x5, '\x00', 0xf8}, {0x6f, 0x40, 0x2, '\x00', 0x3}, {0xb8, 0x7, 0x8, '\x00', 0xd}, {0xc, 0x5, 0xf, '\x00', 0x6}, {0x6, 0xad, 0x0, '\x00', 0x9}, {0x4, 0x4, 0xfb, '\x00', 0xc7}, {0x40, 0xe, 0x7d, '\x00', 0x6}, {0x7, 0x8, 0x6, '\x00', 0x5}, {0x29, 0xb, 0xd, '\x00', 0x8}, {0x8, 0x9, 0x9, '\x00', 0xd}, {0x7, 0x2, 0x7f, '\x00', 0x80}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0xda, 0x7, 0x2, '\x00', 0x2}, {0x2, 0xf8, 0xd, '\x00', 0x6}]}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000f90000000500000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 4.254956514s ago: executing program 3 (id=733): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @private=0xa010102, 0x1, 0x1, [@empty]}, 0x14) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x10, 0xc, 0x23, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x20, 0x0, 0xfd, 0x8000006}}) 4.067988436s ago: executing program 1 (id=734): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r1, &(0x7f0000000000)=0x8, r1, 0x0, 0x4, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x40, 0x30, 0x4e, {0x4e, 0xf, "1b1298f71b20353655ffad0d378e5b291270d07491547c9650920dc4b29595a19268c80a686fd4ab565810e4bce130e994164c6ebd5b3d1f256f9ca181611a88f021f60514bb975c8d6dae55"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x40, 0x11, 0x9a, "07ef796e3fcd68a3df170e746bf25c64741ae096bc25566389899fd849626d811b0a180925c6890b23cbfc634beebfa41a1d18f6c875f606465aac376ebe39cd61cea39d787a03af8e6399b6e60ff332ed0133f4913a31d3a13b47070053f5ed20c66140631e62df3fcf6e56b1b38eb6293b8bcc60092f189f7986670ab02c1939e59b67c9fe31e622e49c24ed67e722c1e3aed8ce2861cb332e"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "e2d8"}, &(0x7f0000000440)={0x20, 0x82, 0x3, "68a0cc"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "99e4cc"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "91"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "b7fc00"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x60, 0x10}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000380)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x40000000015, 0x5, 0x0) sendmsg(r4, &(0x7f0000001080)={&(0x7f0000000040)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x80, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000ac0)=0xfffffffffffffe51) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x18, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}, @call={0x85, 0x0, 0x0, 0x1f}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xf2}}}, &(0x7f0000000780)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef12}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r5], 0x94}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000780)={0x14, &(0x7f00000006c0)={0x40, 0x11, 0x98, {0x98, 0x23, "bbf894c66957425ee2be9d072c23d884526f2d9b343f824b65acf14aed70d8ea137aed5611fcb3cf55b86571db4bdd22907a88fdd1bb411fb4d3dd621d01a2462284a8b2b722df5bbb11296a9bd63422d7d69ec78f26cc083df62ac69ebd9bffe883eb7d589b9d4745f11ec25e7cf74c6e7f5b475ed883385ee19e9d31ec0db3e2b97ac3f822bfee0f920a3f74c2a894cdb8fcd6c432"}}, &(0x7f0000000580)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "399f8af2d5e9ce4b2499404c5071b8b026f293d126ed3423f8dfc05d8a"}}}, &(0x7f0000000a00)={0x34, &(0x7f00000007c0)={0x40, 0xc, 0x4d, "680fbd2906434462a6adc1e87adcd0fbbc2e188a40180a99bf6d90fdebcc11812bc387bd90008a673e16cae91c10e6aaf9ace45f44862fa8cb1eb426bef6a33a9d8c776904f13dd46abd47eae4"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, "8a3f"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x3}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x7}}) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "b341af", 0x28, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0xff, 0x4, 0x7, 0x8, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}]}}}}}, 0x0) 3.623037159s ago: executing program 0 (id=735): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00c610"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002900)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="20130f000026c8b0c56c7b7c9378c7fa91832c86e6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000340)}], 0x3}, 0x8000}, {{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f00000004c0)=""/68, 0x44}], 0x2, &(0x7f0000000340)=""/39, 0x27}, 0x395}, {{&(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/36, 0x24}, {&(0x7f00000007c0)=""/55, 0x37}, {&(0x7f0000000800)=""/27, 0x1b}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/6, 0x6}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f00000013c0)=""/99, 0x63}, {&(0x7f0000000a00)=""/186, 0xba}], 0x8, &(0x7f0000000b40)=""/113, 0x71}}, {{&(0x7f0000000bc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/182, 0xb6}, {&(0x7f0000000d00)=""/232, 0xe8}, {&(0x7f0000000e00)=""/96, 0x60}], 0x3, &(0x7f0000000ec0)=""/25, 0x19}, 0xa6cb}, {{&(0x7f0000000f00)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f80)}], 0x1, &(0x7f0000001000)=""/6, 0x6}, 0x7}, {{&(0x7f0000001040)=@x25, 0x80, &(0x7f0000001240)=[{&(0x7f00000010c0)=""/88, 0x58}, {&(0x7f0000001140)=""/209, 0xd1}], 0x2, &(0x7f0000001280)=""/153, 0x99}, 0x6}, {{&(0x7f0000001340)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000014c0)}, 0x83c}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000011, 0x0, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0xffffffffffffffff, r6, &(0x7f0000000100), 0x3) ptrace$setsig(0x4203, r6, 0x4, &(0x7f0000000040)={0xa, 0xbfdb}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0xfffd, 0x6}, 0x4) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) 2.855457693s ago: executing program 3 (id=738): add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f00000004c0)=0xfffffff7, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x4) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc38"}, 0xaf) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35, 0xffffffffffffffff}, 0x94) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000100)={0x7f00000000000, 0x8, 0x54d9, 0xfffffffffffffffd, 0x9, 0x8000}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003540)=@vmx={0x100, 0x0, 0x2080, {0x6000, 0x40000, {}, 0x1, 0x9a3}, {"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", "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"}}) 2.674623211s ago: executing program 4 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000030c0)={0xc, {"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", 0x1016}}, 0x1006) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000022, 0x0, 0x3}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x38, &(0x7f0000000040)=0xfffffffa, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb, r10}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) sendmmsg$inet(r7, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x21}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80), 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x2e, 0x1, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010100, @multicast2}}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x80}}], 0x4, 0x40) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000340)={0x1d, r12, 0x6, {0x0, 0xf0, 0x1}, 0x2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@RTM_DELMDB={0x58, 0x55, 0x100, 0x70bd29, 0x25dfdbfd, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x1, 0x2, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x3, 0x4, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x58}}, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN, @NFTA_NAT_FAMILY={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x0, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 2.304129927s ago: executing program 4 (id=740): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (fail_nth: 3) 2.29449029s ago: executing program 4 (id=741): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc}}) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="960940e2290099d863d64b7289dfc601e028555234195fe9322212b4a096e986cd1b495f86c8ab4039a9ff1bc0c727f2e93a7fcba033bd57f3beb02be4942e304d8e0008173fbd6719da9c43fd2376333b71242d41fcb72e03f3a534e3942c2e4bf7cc9ca561233bb2e354cf2855fc54cef19a812f88ff3334", @ANYRES64=r0], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x2, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.587968402s ago: executing program 2 (id=744): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001c00010000000000000000a007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1.585356679s ago: executing program 2 (id=745): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000500000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="02"], 0x158}}, 0x0) 1.510038358s ago: executing program 2 (id=746): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x9, 0x3, 0x10000040, 0x8, 'syz1\x00', 0xb57f}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x38bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xd, 0x5}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xa, 0x3}, 0xfffd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000388000/0x2000)=nil, 0x2000}, 0x6}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=""/148, 0x94, 0x0, &(0x7f0000000180)=""/1, 0x1}}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001700)={@multicast1, @multicast2, 0x0}, &(0x7f0000001740)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001800)={'syztnl2\x00', &(0x7f0000001780)={'ip6gre0\x00', r9, 0x2f, 0x5, 0x9, 0x4, 0x2d, @loopback, @empty, 0x8000, 0x1, 0x6, 0x800}}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000016c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000540)={&(0x7f0000001880)=ANY=[@ANYBLOB="d400000088935fbfc46d93d65d194bd50a145d4fd4e752aa56386316d620da99498b339053ea41b0a46e2867f3a3f831f2fadd7c9a9fe69a7a0ac372dcfdf942481facfe92cbecaa6c87c53e43f7990e0c9203c3cf9e5ee1790587f3fd52f26046b42a4ceab612dcaf00c5f01b13393f0c8a1765c7b1dd2997c2f66428663c1e99ed5f6de81377d8f8c70fd3762852c4db74816805489c16df7e6e6119a301993f3f434eeee2bd47c2d9f2dbc2e8bc6417f66f42", @ANYRES16=r8, @ANYBLOB="000825bd7000fcdbdf250f0000000500d5000100000008001b800400030006009600000000000800a000070000000800a100080000000600660003000000310015017cdd4165d29d56ca76f775b504de22cdd1915eab389db067231fbe9f3abbc0ec3c684f07779ba037f96c4c725800000008004b00000000000400cc0008003500020000000600960007000000"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x2, r6, 0x8, &(0x7f0000000200)={0xfffffffd, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, r6, 0x3, &(0x7f00000012c0)=[r6, r6, r6, r6], &(0x7f0000001300)=[{0x2, 0x4, 0x4, 0x5}, {0x5, 0x6, 0xc, 0x5}, {0xfffffffd, 0x2, 0x4, 0x8}], 0x10, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x95}}, './file0\x00'}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="07000000000000090003b983f859ab002af02640", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000100"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x5, 0x6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000688c39198e0a1a181500"/24, @ANYRES32=r2, @ANYBLOB="000000000000000000840100ff010000184f0000f9ffffff000000000000000018410000fcffffff000000000000000018000000f3000000000000000800000018470000fbffffff00000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000006c0)=""/4096, 0x60700, 0xf2abf366fd69c93b, '\x00', r5, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[r10, r11], &(0x7f00000002c0)=[{0x3, 0x5, 0x1, 0x1}], 0x10, 0x10000, @value=r12}, 0x94) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@private=0xa010101, {0x0, 0x7, 0x1000000000}, {}, {0x4}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0xc0}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.452925998s ago: executing program 2 (id=747): r0 = socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x481}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x6c, 0x10, 0x1, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_MAP={0x24, 0xe, {0xcb5, 0x4, 0x657b, 0x4, 0x2, 0xa0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1.32854381s ago: executing program 2 (id=748): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @private=0xa010102, 0x1, 0x1, [@empty]}, 0x14) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x10, 0xc, 0x23, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x20, 0x0, 0xfd, 0x8000006}}) 734.443337ms ago: executing program 1 (id=749): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xec, 0x18, 0x90, 0x20, 0x856, 0xac30, 0xdaf9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x77, 0x2, 0x0, 0xb3, 0xcb, 0x2d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) (async) syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0x0, 0x9, 0xbe, {0xbe, 0x21, "1d699e9c0eb1c6395bb72696585d288413ad80c0283afb57358315e2603f835c3cc1587465f0d3bfac029fb8637cdf90ea0b1f59e30490dd20443686dbe69dfef9553d24a10943c90d5b68607164403c284c2740541de96c0899bba07b5c2588ff469e3ca07014e88baa28b72e3545669c4d9f6b0e608ec3162e6473c9d3da5eeeb40b6867eca5dce5f1ba34a90c24e0aee07853212ebeef498833aca4a7034184060ebccabcb1562ba0931b51f18d8cd9edbc6f451645e6babd2b77"}}, &(0x7f00000001c0)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "dc99c679f1439821cebe2b18796a99564c34aa83300ab09620bddf649f7ca6391e28ba75f0649399fd56b8577245494ca28f831c1c0a8ef9768d41d988ce6d7a8588fa6874d3464b9de45c79bba1d7e01927c569804065f9cd6c6d6c7d11dc10d3cdeb860056e64c234c3417b04092536fac025cc8f31776670606facceb82cdb4f32c398fe765ec1dbd58825501fc96bd61b3e32a4490a905dfc5860e7160a801132c1bada9d7c4619df43e9be0bcac033f2debcb8f697fd7a281d9f8777be26b584bad334f85f02e3ef62fe164df33d18d8522f9f93056af63b689b4b061"}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000040)={0x40, 0x16, 0x4, "5457c32c"}, &(0x7f00000006c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000002c0)={0x21, 0x0, 0x1, "d4"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) close(0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f00000005c0)={0x0, 0x0, 0x1, 'T'}, 0x0, 0x0}) 553.648745ms ago: executing program 0 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000100000100fffc0900010073797a30000000002c000000030a010206000000000000000100fffd0900010073797a3000000000090003007b797a310000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300f100000008000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xd4}}, 0x0) (fail_nth: 8) 155.255895ms ago: executing program 2 (id=751): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2d, 'pids'}]}, 0x6) openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) syz_usb_connect$uac1(0x1, 0xcd, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x7, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x40}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x3, 0x6f, 0x5, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x1, 0x1, 0x80}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x5, 0x4, [0xa, 0xa, 0x7, 0x8], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf4, 0xbe, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x1, 0x4, {0x7, 0x25, 0x1, 0x80, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x3, 0x4, 0xec}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x3, 0x28, 0xf7, "c1f522cca2b1"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x2, 0x1001}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x8, 0x7, 'cWq', "b2"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x89, 0x3, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x9, 0x48, {0x7, 0x25, 0x1, 0x3, 0x5, 0x8}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x8, 0x80, 0xab, 0x8, 0xff}, 0x70, &(0x7f0000000500)={0x5, 0xf, 0x70, 0x2, [@generic={0x64, 0x10, 0x2, "bed3d9f387b858fb02ac0c4f3cc7ad74ad3283924e570b1e09048b4a0fbcb4b29c41733385f690042090e909c377c7faf28adc398dc589499907003135d8015a16ba1f2b27e88c425d059dab410b06e948737c3d9548e910a6e3681a94da59137d"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x6, 0xc}]}, 0x2, [{0x4d, &(0x7f0000000580)=@string={0x4d, 0x3, "8f00ae19b386679bc5b3aa8530172a7dc09b6e10beeda9be26b864359810189aa5bf5aa4c853889850f87b6ec813d9934b63f2ac981b8dff2bfd026aa9e2d6125384dc475af9aaaf53e88f"}}, {0x10, &(0x7f0000000240)=@string={0x10, 0x3, "0278e75291d4989ef26d7421c988"}}]}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @sliced={0xd4e, [0x9, 0x7ff, 0x400, 0xb, 0x9, 0x86d3, 0x40, 0x8, 0x9, 0x21e9, 0x6, 0x0, 0x3ff, 0x4, 0x6, 0xff, 0x3d8, 0x7, 0xfffd, 0x1, 0x1, 0x1ff, 0xa9b, 0x2d19, 0x5, 0xe17, 0x0, 0x8001, 0x6, 0x1ff, 0x7, 0x2, 0x4, 0x1, 0x5, 0x7, 0x1, 0x6, 0x40, 0x7, 0x7b, 0x7, 0x9, 0x2, 0x5, 0x101, 0xc, 0xfff9], 0x3}}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000002600)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="fea45a000000aba2"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000280)={0x40, 0x17, 0x2, "aaa2"}, 0x0, 0x0}) 68.550423ms ago: executing program 0 (id=752): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0xb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000280)={0x11, @empty, 0x4c23, 0x0, 'wrr\x00', 0x7, 0x40000008, 0x4002b}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r4, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 67.925291ms ago: executing program 0 (id=753): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x2901, 0x0, 0x5}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x204b01, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x9) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x4120}, 0x18, 0x1) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(0xffffffffffffffff, 0x0, r4, 0x0, 0x46) 47.473868ms ago: executing program 0 (id=754): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x1c8, &(0x7f0000000100)=0x2, 0x0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000140)) getsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000001140), &(0x7f0000001180)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000011c0)="e2bad23456cbee456988efe318382aa12278d5f0b7fabcd78f1bb993a3a47ce11eed70b4251cc74247ff84a3532d0e4e83d531679570fd25484eee718bd3676f34db8601e3ee5e873ac140b519f25a4ebba95af3de53cf17a94a7caedadeec71bda3d68d73880701a9b8fcbae45276ec610f2ddeb49aa7f2907c6b5a9f577fb6dad129c151b42e8708f535c0aa87e0", 0x8f) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x54, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}, {0x6}, {0x8, 0x13, 0x149c620f}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x11b5cc603628ee7f}, 0x40000) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000001400)={'syzkaller0\x00', {0x2, 0x0, @initdev}}) fsetxattr$security_evm(r2, &(0x7f0000001440), &(0x7f0000001480)=@sha1={0x1, "bdf2ed638e3001efe1654a20e9b7812085ecbc81"}, 0x15, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000014c0)={0xdcc, 0x426, 0x5, 0x3}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001500)={0x8, {{0xa, 0x4e20, 0x3, @local, 0x984}}}, 0x88) bind$unix(0xffffffffffffffff, &(0x7f00000015c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001680)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000001640), {[{{@arp={@broadcast, @rand_addr=0x64010100, 0xff, 0xffffffff, 0x10, 0x5, {@empty, {[0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0x400, 0x4, 0x5, 0x6, 0x9, 'batadv_slave_1\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x0, 0x48}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @private=0xa010100, 0x4, 0x1}}}, {{@arp={@empty, @empty, 0x0, 0xffffffff, 0x3, 0xe, {@mac=@random="dc291cb8cdee", {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xf30d, 0x1, 0x1, 0x3, 0x2, 0x9, 'netdevsim0\x00', 'tunl0\x00', {}, {0xd1cb96216d56469}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@broadcast, @rand_addr=0x64010100, @broadcast, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000001b00)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001b80)={0x6, &(0x7f0000001b40)=[{0x80, 0x9, 0x5, 0x4}, {0xffa7, 0x1, 0x2, 0x3}, {0xd, 0x7, 0x2, 0x3}, {0x6, 0xfa, 0xf, 0x2}, {0x40, 0x80, 0x5, 0x3ff}, {0x0, 0x40, 0xe1, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001bc0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f0000001c40)=r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001cc0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x34, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000001dc0)) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0x84, 0x1, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x25}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7f}]}, 0x84}, 0x1, 0x0, 0x0, 0x924}, 0x48000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r8) 0s ago: executing program 0 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000200), {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x5574c0, 0x0) fchdir(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000005c0)={0x6, 0x0, [{0xf6, 0x2, 0x0, 0x0, @msi={0x10, 0x8, 0x6, 0x3}}, {0x7, 0x5, 0x1, 0x0, @msi={0x5, 0x7, 0x6, 0x8}}, {0xd28, 0x1, 0x0, 0x0, @msi={0x80, 0x8, 0x4, 0x1}}, {0xbaeb, 0x2, 0x0, 0x0, @sint={0x7, 0xf}}, {0xb09aed, 0x5, 0x1, 0x0, @adapter={0x3, 0x9, 0x34, 0x9, 0xce8b}}, {0x4, 0x0, 0x0, 0x0, @irqchip={0x80000001, 0x9}}]}) r4 = eventfd2(0x8, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x10ffff, 0xff, 0x4000000, 0x24}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x2, r4}) socket$inet_sctp(0x2, 0x1, 0x84) select(0x1f, &(0x7f0000000400)={0xc, 0x3, 0x80000000, 0x0, 0x7, 0x201, 0xfffffffffffffffe}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) close(0x3) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) write$eventfd(r4, &(0x7f0000000080)=0x430f, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x60081, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x48, 0x0, @fd=r5, 0x11e973a4, 0x0, 0x2, 0x0, 0x1}) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): .237'. [ 130.594725][ T6856] netdevsim netdevsim0: Direct firmware load for . [ 130.594725][ T6856] failed with error -2 [ 130.606149][ T6856] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 130.606149][ T6856] [ 130.882236][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 131.247748][ T5909] tipc: Node number set to 2130706433 [ 131.670330][ T5968] usb 5-1: USB disconnect, device number 9 [ 131.722277][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 132.429815][ T5909] usb 2-1: USB disconnect, device number 17 [ 132.864151][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.869273][ T6909] tipc: Enabling of bearer rejected, failed to enable media [ 132.870789][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.917002][ T5909] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 132.936968][ T5968] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.959209][ T6909] bridge_slave_0: left allmulticast mode [ 133.001813][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.019317][ T6909] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 133.088379][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.099418][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.109332][ T5968] usb 3-1: Using ep0 maxpacket: 32 [ 133.111844][ T5909] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 133.116625][ T5968] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.134140][ T5968] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 133.143285][ T5968] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.143961][ T5909] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 133.156787][ T5968] usb 3-1: config 0 interface 0 has no altsetting 1 [ 133.172559][ T5909] usb 2-1: Manufacturer: syz [ 133.173735][ T5968] usb 3-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 133.180763][ T5909] usb 2-1: config 0 descriptor?? [ 133.195465][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.201779][ T797] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.203825][ T5968] usb 3-1: Product: syz [ 133.219250][ T5968] usb 3-1: Manufacturer: syz [ 133.224335][ T5968] usb 3-1: SerialNumber: syz [ 133.244024][ T5968] usb 3-1: config 0 descriptor?? [ 133.254664][ T5968] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.301932][ T5968] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 133.333953][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.367028][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 133.376285][ T797] usb 1-1: config index 0 descriptor too short (expected 4132, got 36) [ 133.393628][ T797] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 133.426813][ T797] usb 1-1: config 9 has no interfaces? [ 133.442602][ T797] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 133.470605][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.479960][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.479990][ T797] usb 1-1: Product: syz [ 133.480005][ T797] usb 1-1: Manufacturer: syz [ 133.480018][ T797] usb 1-1: SerialNumber: syz [ 133.507613][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.695902][ T796] usb 4-1: USB disconnect, device number 8 [ 133.711180][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.723100][ T5909] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 133.749844][ T5909] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 133.751769][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.756711][ T5909] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 133.796083][ T5909] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 133.809766][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.824432][ T5909] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 133.826300][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.831490][ T5909] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 133.846430][ T5909] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 133.863938][ T797] usb 1-1: USB disconnect, device number 6 [ 133.872610][ T5909] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 134.658290][ T6929] __vm_enough_memory: pid: 6929, comm: syz.4.259, bytes: 4503599627366400 not enough memory for the allocation [ 134.797350][ T796] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.978943][ T796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.990176][ T796] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.001671][ T796] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 135.017149][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.036492][ T796] usb 1-1: config 0 descriptor?? [ 135.496572][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 135.733672][ T796] usb 3-1: USB disconnect, device number 5 [ 135.911621][ T5909] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 135.934335][ T5909] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 135.951248][ T5909] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 136.000344][ T5909] usb 2-1: USB disconnect, device number 18 [ 136.063328][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'. [ 136.176975][ T796] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 136.184862][ T6947] fido_id[6947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 136.372010][ T796] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 136.386978][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.401442][ T796] usb 3-1: config 0 descriptor?? [ 136.462357][ T5968] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 136.480350][ T796] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 136.681529][ T796] gp8psk: usb in 128 operation failed. [ 136.706051][ T5968] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 136.733502][ T5968] usb 2-1: config 0 has no interface number 0 [ 136.810970][ T5968] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.822333][ T5968] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.852231][ T5968] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 136.861817][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.871064][ T5968] usb 2-1: Product: syz [ 136.906010][ T5968] usb 2-1: Manufacturer: syz [ 137.022541][ T796] gp8psk: usb in 146 operation failed. [ 137.030673][ T796] gp8psk: failed to get FW version [ 137.050527][ T796] gp8psk: FPGA Version = 157 [ 137.099536][ T5968] usb 2-1: SerialNumber: syz [ 137.125195][ T5968] usb 2-1: config 0 descriptor?? [ 137.136355][ T5968] ums-karma 2-1:0.46: USB Mass Storage device detected [ 137.202294][ T5968] ums-karma 2-1:0.46: probe with driver ums-karma failed with error -5 [ 137.391766][ T796] gp8psk: usb in 138 operation failed. [ 137.418211][ T796] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 137.449074][ T6959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.464425][ T6959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.468534][ T796] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 137.542655][ T43] usb 2-1: USB disconnect, device number 19 [ 137.650585][ T796] usb 3-1: USB disconnect, device number 6 [ 137.669266][ T5942] usb 1-1: USB disconnect, device number 7 [ 138.524380][ T6977] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 138.577040][ T6977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.600245][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 138.915196][ T6991] trusted_key: encrypted_key: insufficient parameters specified [ 139.079026][ T5942] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.176994][ T43] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 139.246679][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.259562][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.321523][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.343010][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.362848][ T5942] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.375061][ T43] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 139.393358][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.403040][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.428707][ T5942] usb 3-1: config 0 descriptor?? [ 139.497949][ T43] usb 2-1: config 0 descriptor?? [ 139.827436][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.921678][ T43] waltop 0003:172F:0037.0002: collection stack underflow [ 139.944169][ T5942] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 139.958596][ T43] waltop 0003:172F:0037.0002: item 0 1 0 12 parsing failed [ 139.970311][ T43] waltop 0003:172F:0037.0002: probe with driver waltop failed with error -22 [ 139.987000][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 139.997154][ T5909] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 140.007521][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.015988][ T5909] usb 4-1: Product: syz [ 140.021172][ T5909] usb 4-1: Manufacturer: syz [ 140.025889][ T5909] usb 4-1: SerialNumber: syz [ 140.035846][ T5909] usb 4-1: config 0 descriptor?? [ 140.052341][ T5909] gspca_main: sq905-2.14.0 probing 2770:9120 [ 140.127884][ T6986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.140265][ T6986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.151144][ T43] usb 2-1: USB disconnect, device number 20 [ 140.590931][ T5968] usb 3-1: USB disconnect, device number 7 [ 140.976317][ T7018] bridge1: entered promiscuous mode [ 140.981759][ T7018] bridge1: entered allmulticast mode [ 141.029690][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 141.048789][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 141.058771][ T5909] gspca_sq905: bulk read fail (-22) len 0/4 [ 141.070766][ T5909] sq905 4-1:0.0: probe with driver sq905 failed with error -5 [ 141.262762][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.273448][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.313203][ T43] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.376828][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.396313][ T43] usb 2-1: config 0 descriptor?? [ 141.496958][ T797] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.659164][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 141.680624][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.696714][ T797] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 141.708743][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.733713][ T797] usb 3-1: config 0 descriptor?? [ 142.522968][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.532078][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.038291][ T796] usb 4-1: USB disconnect, device number 9 [ 143.367251][ T5831] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.467324][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 143.539388][ T5831] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 143.565756][ T5831] usb 1-1: config 0 has no interface number 0 [ 143.597191][ T5831] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.637432][ T5831] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 143.666468][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.686425][ T5831] usb 1-1: Product: syz [ 143.699711][ T5831] usb 1-1: Manufacturer: syz [ 143.713163][ T5831] usb 1-1: SerialNumber: syz [ 143.738775][ T5831] usb 1-1: config 0 descriptor?? [ 143.785023][ T5831] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 143.960795][ T5942] usb 1-1: USB disconnect, device number 8 [ 143.971454][ T5942] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 144.220900][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 144.674697][ T5909] usb 2-1: USB disconnect, device number 21 [ 144.984147][ T797] usb 3-1: string descriptor 0 read error: -71 [ 145.344122][ T797] usbhid 3-1:0.0: can't add hid device: -71 [ 145.422538][ T797] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 145.438585][ T797] usb 3-1: USB disconnect, device number 8 [ 145.962674][ T7092] trusted_key: encrypted_key: insufficient parameters specified [ 146.321069][ T7093] trusted_key: encrypted_key: insufficient parameters specified [ 146.334355][ T7093] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 147.134305][ T7095] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 147.207146][ T7095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.563268][ T5968] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.677309][ T5831] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 147.757027][ T5968] usb 4-1: Using ep0 maxpacket: 8 [ 147.763899][ T5968] usb 4-1: config 162 has an invalid interface number: 166 but max is 0 [ 147.778993][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 147.788003][ T5968] usb 4-1: config 162 has no interface number 0 [ 147.794289][ T5968] usb 4-1: config 162 interface 166 has no altsetting 0 [ 147.805266][ T5968] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 147.815026][ T7123] openvswitch: netlink: Flow actions attr not present in new flow. [ 147.815390][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.831923][ T5968] usb 4-1: Product: syz [ 147.836178][ T5968] usb 4-1: Manufacturer: syz [ 147.845085][ T5968] usb 4-1: SerialNumber: syz [ 147.859845][ T7126] capability: warning: `syz.4.314' uses 32-bit capabilities (legacy support in use) [ 147.860028][ T5831] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 147.879680][ T5831] usb 2-1: can't read configurations, error -61 [ 147.919023][ T7123] bridge1: entered promiscuous mode [ 147.938650][ T7123] netlink: 'syz.0.310': attribute type 2 has an invalid length. [ 147.948822][ T7123] netlink: 'syz.0.310': attribute type 12 has an invalid length. [ 148.128942][ T5968] appledisplay 4-1:162.166: Could not find int-in endpoint [ 148.137804][ T5968] usbhid 4-1:162.166: couldn't find an input interrupt endpoint [ 148.160320][ T5968] usb 4-1: USB disconnect, device number 10 [ 148.188546][ T5831] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 148.387286][ T7132] trusted_key: encrypted_key: insufficient parameters specified [ 148.531475][ T5831] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 148.539801][ T5831] usb 2-1: can't read configurations, error -61 [ 148.644151][ T5831] usb usb2-port1: attempt power cycle [ 148.838454][ T5909] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 148.980957][ T7136] syzkaller0: entered promiscuous mode [ 149.026994][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 149.037380][ T5909] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 149.049753][ T7136] syzkaller0: entered allmulticast mode [ 149.096548][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.111101][ T5831] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 149.140296][ T5831] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 149.155437][ T5831] usb 2-1: can't read configurations, error -61 [ 149.172361][ T5909] usb 5-1: config 0 descriptor?? [ 149.287028][ T5942] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 149.287049][ T5831] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 149.331660][ T5831] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 149.348284][ T5831] usb 2-1: can't read configurations, error -61 [ 149.365281][ T5831] usb usb2-port1: unable to enumerate USB device [ 149.459694][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17598, setting to 1024 [ 149.472576][ T5942] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 149.488478][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.509502][ T5942] usb 4-1: config 0 descriptor?? [ 149.526421][ T7137] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 149.554362][ T7145] netlink: 80 bytes leftover after parsing attributes in process `syz.2.318'. [ 149.566693][ T7145] netlink: 388 bytes leftover after parsing attributes in process `syz.2.318'. [ 149.710074][ T29] audit: type=1804 audit(1772000103.288:2): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.320" name="/newroot/81/file1" dev="fuse" ino=1 res=1 errno=0 [ 149.803663][ T5909] usbhid 5-1:0.0: can't add hid device: -71 [ 149.810958][ T5909] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 149.826077][ T5909] usb 5-1: USB disconnect, device number 10 [ 149.961206][ T5942] stadia 0003:18D1:9400.0004: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.3-1/input0 [ 149.978730][ T5942] stadia 0003:18D1:9400.0004: no inputs found [ 149.993002][ T5942] stadia 0003:18D1:9400.0004: force feedback init failed [ 150.203958][ T5831] usb 4-1: USB disconnect, device number 11 [ 150.817947][ T5942] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.837945][ T5909] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 150.870896][ T7171] trusted_key: encrypted_key: insufficient parameters specified [ 150.983721][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 151.012493][ T5942] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 151.022432][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.030698][ T5942] usb 5-1: Product: syz [ 151.035264][ T5942] usb 5-1: Manufacturer: syz [ 151.040327][ T5909] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 151.048691][ T5909] usb 2-1: config 0 has no interface number 0 [ 151.054814][ T5909] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.066526][ T5942] usb 5-1: SerialNumber: syz [ 151.074015][ T5942] usb 5-1: config 0 descriptor?? [ 151.079962][ T5909] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.107476][ T5942] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 151.126105][ T5909] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 151.139219][ T5909] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 151.161981][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.174460][ T5909] usb 2-1: config 0 descriptor?? [ 151.189093][ T5909] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input9 [ 151.397361][ T5909] usb 2-1: USB disconnect, device number 26 [ 152.028141][ T5942] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 152.524798][ T5942] usb 5-1: USB disconnect, device number 11 [ 152.558603][ T7181] syzkaller0: entered promiscuous mode [ 152.605420][ T7181] syzkaller0: entered allmulticast mode [ 152.720173][ T7189] pim6reg: entered allmulticast mode [ 152.750557][ T7189] pim6reg: left allmulticast mode [ 152.797521][ T796] IPVS: starting estimator thread 0... [ 152.892178][ T7193] IPVS: using max 33 ests per chain, 79200 per kthread [ 152.901409][ T5968] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 153.062146][ T5968] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.080163][ T7202] netlink: 80 bytes leftover after parsing attributes in process `syz.2.335'. [ 153.094350][ T7202] netlink: 388 bytes leftover after parsing attributes in process `syz.2.335'. [ 153.165620][ T5968] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.192175][ T5968] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.208605][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.224347][ T5968] usb 2-1: config 0 descriptor?? [ 153.537061][ T796] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 153.671554][ T7213] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 153.705891][ T796] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 153.714330][ T796] usb 5-1: config 0 has no interface number 0 [ 153.747012][ T796] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.762058][ T796] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.776815][ T796] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 153.791439][ T796] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 153.802872][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.876293][ T796] usb 5-1: config 0 descriptor?? [ 153.927914][ T796] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input10 [ 154.128999][ T796] usb 5-1: USB disconnect, device number 12 [ 154.856241][ T7231] loop5: detected capacity change from 0 to 7 [ 155.066417][ T7231] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 155.071829][ T7231] loop5: partition table partially beyond EOD, truncated [ 155.089744][ T7231] loop5: p1 size 4294377484 extends beyond EOD, truncated [ 155.141474][ T7234] netlink: 68 bytes leftover after parsing attributes in process `syz.2.345'. [ 155.330936][ T7239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.342344][ T29] audit: type=1326 audit(1772000108.918:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 155.405635][ T29] audit: type=1326 audit(1772000108.918:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 155.430630][ T29] audit: type=1326 audit(1772000108.918:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 155.474210][ T29] audit: type=1326 audit(1772000108.918:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 155.498451][ T29] audit: type=1326 audit(1772000108.918:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 155.563105][ T29] audit: type=1326 audit(1772000108.918:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 155.608433][ T29] audit: type=1326 audit(1772000108.918:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 155.641445][ T29] audit: type=1326 audit(1772000108.918:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 155.664796][ T29] audit: type=1326 audit(1772000108.918:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 155.967459][ T5912] usb 2-1: USB disconnect, device number 27 [ 155.974240][ T29] audit: type=1326 audit(1772000108.918:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 156.305915][ T7256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.395983][ T7259] loop4: detected capacity change from 0 to 1 [ 156.418137][ T5955] Dev loop4: unable to read RDB block 1 [ 156.442932][ T5955] loop4: unable to read partition table [ 156.460118][ T5955] loop4: partition table beyond EOD, truncated [ 156.494999][ T7259] Dev loop4: unable to read RDB block 1 [ 156.509006][ T7259] loop4: unable to read partition table [ 156.521530][ T7259] loop4: partition table beyond EOD, truncated [ 156.529287][ T7259] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 156.913946][ T7272] trusted_key: syz.2.355 sent an empty control message without MSG_MORE. [ 156.930405][ T7274] loop5: detected capacity change from 0 to 7 [ 156.939927][ T5968] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 156.959940][ T7274] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 156.975546][ T7274] loop5: partition table partially beyond EOD, truncated [ 156.995525][ T7274] loop5: p1 size 4294377484 extends beyond EOD, truncated [ 157.037130][ T5912] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.085270][ T5955] udevd[5955]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 157.097727][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 157.128863][ T5968] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 157.154036][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.207546][ T5968] usb 4-1: Product: syz [ 157.211751][ T5968] usb 4-1: Manufacturer: syz [ 157.226746][ T5968] usb 4-1: SerialNumber: syz [ 157.234000][ T5912] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 157.252978][ T5968] usb 4-1: config 0 descriptor?? [ 157.253009][ T5912] usb 5-1: config 0 has no interface number 0 [ 157.276736][ T5968] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 157.304718][ T5912] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.349917][ T5912] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.416961][ T5912] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 157.445777][ T5912] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 157.472115][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.498725][ T5912] usb 5-1: config 0 descriptor?? [ 157.510194][ T5912] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input12 [ 157.670529][ T7266] netlink: 27 bytes leftover after parsing attributes in process `syz.3.353'. [ 157.681481][ T5968] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 157.704894][ T5968] usb 4-1: USB disconnect, device number 12 [ 157.718476][ T5909] usb 5-1: USB disconnect, device number 13 [ 157.793906][ T5912] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 157.959251][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.975162][ T5912] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.991356][ T5912] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.016599][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.052717][ T5912] usb 3-1: config 0 descriptor?? [ 158.688080][ T7296] trusted_key: encrypted_key: insufficient parameters specified [ 160.112487][ T7322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.134610][ T7322] xt_bpf: check failed: parse error [ 160.158260][ T7322] overlayfs: missing 'lowerdir' [ 160.164388][ T5912] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.367989][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 160.462172][ T5912] usb 1-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 160.492024][ T5912] usb 1-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 160.532518][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 160.548185][ T5912] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 160.578860][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.618506][ T5912] usb 1-1: config 0 descriptor?? [ 160.945684][ T5968] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 161.098893][ T5968] usb 4-1: config 0 has no interfaces? [ 161.111925][ T5968] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 161.122964][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.133707][ T5968] usb 4-1: Product: syz [ 161.140355][ T5968] usb 4-1: Manufacturer: syz [ 161.147183][ T5968] usb 4-1: SerialNumber: syz [ 161.218896][ T5968] usb 4-1: config 0 descriptor?? [ 161.253138][ T5912] playstation 0003:054C:09CC.0005: invalid report_size 39749 [ 161.263321][ T5912] playstation 0003:054C:09CC.0005: item 0 4 1 7 parsing failed [ 161.272142][ T5912] playstation 0003:054C:09CC.0005: Parse failed [ 161.303526][ T5912] playstation 0003:054C:09CC.0005: probe with driver playstation failed with error -22 [ 161.440474][ T5912] usb 4-1: USB disconnect, device number 13 [ 161.465595][ T5909] usb 1-1: USB disconnect, device number 9 [ 161.536966][ T5968] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 161.632537][ T5831] usb 3-1: USB disconnect, device number 9 [ 161.668011][ T7340] loop5: detected capacity change from 0 to 7 [ 161.688623][ T5968] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 161.698434][ T7340] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 161.703763][ T7340] loop5: partition table partially beyond EOD, truncated [ 161.711584][ T5968] usb 2-1: config 0 has no interface number 0 [ 161.717914][ T5968] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.731519][ T7340] loop5: p1 size 4294377484 extends beyond EOD, truncated [ 161.738831][ T5968] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.750942][ T5968] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 161.778525][ T5968] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 161.797997][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.805690][ T5955] udevd[5955]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 161.823080][ T7344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.375'. [ 161.872783][ T7346] kAFS: unable to lookup cell '@' [ 161.901088][ T5968] usb 2-1: config 0 descriptor?? [ 161.948724][ T5968] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input13 [ 162.132243][ T7351] kAFS: unable to lookup cell '(,c' [ 162.163337][ T5942] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.226080][ T5909] usb 2-1: USB disconnect, device number 28 [ 162.368551][ T5942] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 162.437090][ T7357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.494869][ T5942] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 162.537038][ T5942] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 162.547271][ T5942] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 162.926945][ T5942] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 162.948946][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.988257][ T7344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.201658][ T7344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.209120][ T7344] IPv6: NLM_F_CREATE should be set when creating new route [ 163.216434][ T7344] IPv6: NLM_F_CREATE should be set when creating new route [ 163.223722][ T7344] IPv6: NLM_F_CREATE should be set when creating new route [ 163.312300][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.665275][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.817023][ T797] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 163.999059][ T797] usb 2-1: Using ep0 maxpacket: 32 [ 164.006554][ T797] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 164.014881][ T797] usb 2-1: config 4 has no interface number 0 [ 164.027003][ T797] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.071908][ T797] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.082994][ T797] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 164.098664][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.117678][ T5942] ath6kl: Failed to submit usb control message: -110 [ 164.124938][ T5942] ath6kl: unable to send the bmi data to the device: -110 [ 164.135120][ T5942] ath6kl: Unable to send get target info: -110 [ 164.154981][ T5942] ath6kl: Failed to init ath6kl core: -110 [ 164.173181][ T5942] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 164.187257][ T797] hub 2-1:4.128: USB hub found [ 164.386637][ T797] hub 2-1:4.128: config failed, can't read hub descriptor (err -22) [ 164.419439][ T797] usb 2-1: USB disconnect, device number 29 [ 164.957353][ T5831] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 165.059944][ T5968] usb 3-1: USB disconnect, device number 10 [ 165.140624][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.151131][ T5831] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.161764][ T5831] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.178729][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.224163][ T5831] usb 1-1: config 0 descriptor?? [ 165.227154][ T5942] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 165.261478][ T7385] loop5: detected capacity change from 0 to 7 [ 165.276623][ T7385] Dev loop5: unable to read RDB block 7 [ 165.301219][ T7385] loop5: AHDI p3 p4 [ 165.314813][ T7385] loop5: partition table partially beyond EOD, truncated [ 165.377675][ T7385] loop5: p3 start 1459814400 is beyond EOD, truncated [ 165.417952][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 165.434945][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.451852][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.621466][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.668337][ T7387] tipc: Failed to remove unknown binding: 66,0,0/0:3517886335/3517886336 [ 165.698208][ T5942] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 165.702468][ T7387] tipc: Failed to remove unknown binding: 66,0,0/0:3517886335/3517886336 [ 165.740215][ T5942] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.780639][ T5942] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.795809][ T5942] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.855595][ T5942] usb 2-1: Manufacturer: syz [ 165.891939][ T5942] usb 2-1: config 0 descriptor?? [ 166.127816][ T5968] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 166.254900][ T5942] rc_core: IR keymap rc-hauppauge not found [ 166.260967][ T5942] Registered IR keymap rc-empty [ 166.271752][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.297054][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.319032][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 166.319214][ T5968] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 166.339732][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 166.371817][ T5968] usb 3-1: config 0 has no interface number 0 [ 166.379475][ T5968] usb 3-1: config 0 interface 31 has no altsetting 0 [ 166.379585][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.388744][ T5968] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=55.ea [ 166.413890][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.422188][ T5968] usb 3-1: Product: syz [ 166.426484][ T5968] usb 3-1: Manufacturer: syz [ 166.427093][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.431207][ T5968] usb 3-1: SerialNumber: syz [ 166.446960][ T796] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 166.464098][ T5968] usb 3-1: config 0 descriptor?? [ 166.475589][ T5968] kvaser_usb 3-1:0.31: error -ENODEV: Cannot get usb endpoint(s) [ 166.477121][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.517802][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.526985][ T5831] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 166.557134][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.587037][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.603211][ T796] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 166.613532][ T796] usb 5-1: config 0 has no interface number 0 [ 166.617054][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.620931][ T796] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.642028][ T796] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.654369][ T796] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 166.657063][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.703140][ T796] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 166.712324][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 166.718567][ T5831] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 166.726839][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.727889][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.743472][ T5831] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 166.749274][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.386'. [ 166.761510][ T5831] usb 4-1: can't read configurations, error -22 [ 166.794939][ T796] usb 5-1: config 0 descriptor?? [ 166.807062][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.830099][ T796] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input15 [ 166.895472][ T5942] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 166.915914][ T5942] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 166.918032][ T5831] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 167.015870][ T5942] usb 5-1: USB disconnect, device number 14 [ 167.117212][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 167.131411][ T5831] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 167.148002][ T5831] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 167.166816][ T5831] usb 4-1: can't read configurations, error -22 [ 167.182713][ T5831] usb usb4-port1: attempt power cycle [ 167.195927][ T5880] usb 3-1: USB disconnect, device number 11 [ 167.542312][ T7410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.580219][ T5831] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 167.607996][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 167.613979][ T5831] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 167.629765][ T5831] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 167.638468][ T5831] usb 4-1: can't read configurations, error -22 [ 167.807562][ T5831] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 167.847783][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 167.855695][ T5831] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 167.869669][ T5831] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 167.881821][ T5880] usb 1-1: USB disconnect, device number 10 [ 167.898239][ T5831] usb 4-1: can't read configurations, error -22 [ 167.917766][ T5831] usb usb4-port1: unable to enumerate USB device [ 167.987626][ T5831] usb 2-1: USB disconnect, device number 30 [ 168.346217][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 168.737052][ T5880] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 169.002407][ T5880] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.012204][ T5880] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 169.029508][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.049724][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 169.065266][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 169.106316][ T7438] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 169.141554][ T5880] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.150874][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.166843][ T5880] usb 5-1: Product: syz [ 169.187834][ T5880] usb 5-1: Manufacturer: syz [ 169.336418][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 169.344761][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 169.355328][ T5880] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 169.363025][ T5880] cdc_wdm 5-1:1.0: Unknown control protocol [ 169.543651][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.570723][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.766465][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 169.860450][ T5831] usb 5-1: USB disconnect, device number 15 [ 171.798793][ T797] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 171.959997][ T797] usb 2-1: Using ep0 maxpacket: 8 [ 171.979489][ T797] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 172.005649][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.030090][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.060986][ T797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 172.097597][ T797] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 172.117826][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.143715][ T797] usb 2-1: config 0 descriptor?? [ 172.547046][ T5880] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 172.569762][ T797] redragon 0003:0C45:760B.0006: unknown main item tag 0x6 [ 172.577060][ T5909] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 172.585008][ T797] redragon 0003:0C45:760B.0006: item fetching failed at offset 7/133 [ 172.594141][ T797] redragon 0003:0C45:760B.0006: probe with driver redragon failed with error -22 [ 172.686971][ T5880] usb 5-1: device descriptor read/64, error -71 [ 172.736958][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 172.743674][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.769670][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 172.782495][ T43] usb 2-1: USB disconnect, device number 31 [ 172.798912][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.812969][ T5909] usb 4-1: config 0 descriptor?? [ 172.957005][ T5880] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 172.975812][ T5909] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 173.096970][ T5880] usb 5-1: device descriptor read/64, error -71 [ 173.207490][ T5880] usb usb5-port1: attempt power cycle [ 173.256395][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 173.557049][ T5880] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 173.650179][ T5880] usb 5-1: device descriptor read/8, error -71 [ 173.696982][ T797] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 173.770739][ T5909] gspca_vc032x: reg_r err -71 [ 173.775522][ T5909] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 173.848703][ T7538] fuse: Bad value for 'fd' [ 173.859568][ T7538] fuse: Bad value for 'fd' [ 173.887037][ T5880] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 173.908861][ T5880] usb 5-1: device descriptor read/8, error -71 [ 173.989190][ T5909] usb 4-1: USB disconnect, device number 18 [ 174.010425][ T797] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 174.023474][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.038066][ T797] usb 2-1: Product: syz [ 174.042338][ T797] usb 2-1: Manufacturer: syz [ 174.052134][ T797] usb 2-1: SerialNumber: syz [ 174.057695][ T5880] usb usb5-port1: unable to enumerate USB device [ 174.062591][ T797] usb 2-1: config 0 descriptor?? [ 174.076111][ T797] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 174.616101][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 174.867314][ T797] gspca_stk1135: reg_w 0x0 err -110 [ 174.873661][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 175.561183][ T7557] loop4: detected capacity change from 0 to 14 [ 175.578869][ T5955] Dev loop4: unable to read RDB block 14 [ 175.584570][ T5955] loop4: AHDI p1 p2 p3 [ 175.602877][ T5955] loop4: partition table partially beyond EOD, truncated [ 175.614726][ T797] gspca_stk1135: Sensor write failed [ 175.614991][ T5955] loop4: p1 start 1601398130 is beyond EOD, truncated [ 175.631562][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 175.631562][ T5955] loop4: p2 start 1702059890 is beyond EOD, [ 175.631578][ T797] gspca_stk1135: Sensor write failed [ 175.639359][ T5955] truncated [ 175.665352][ T7557] Dev loop4: unable to read RDB block 14 [ 175.672344][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 175.672385][ T7557] loop4: AHDI p1 p2 p3 [ 175.687054][ T7557] loop4: partition table partially beyond EOD, truncated [ 175.695040][ T797] gspca_stk1135: Sensor read failed [ 175.702758][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 175.707510][ T7557] loop4: p1 start 1601398130 is beyond EOD, truncated [ 175.721488][ T7557] loop4: p2 start 1702059890 is beyond EOD, truncated [ 175.790662][ T797] gspca_stk1135: Sensor read failed [ 175.822079][ T797] gspca_stk1135: Detected sensor type unknown (0x0) [ 175.851196][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 175.869729][ T797] gspca_stk1135: Sensor read failed [ 175.886604][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 175.905299][ T797] gspca_stk1135: Sensor read failed [ 175.937263][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 175.954023][ T797] gspca_stk1135: Sensor write failed [ 176.033329][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 176.061486][ T797] gspca_stk1135: Sensor write failed [ 176.073200][ T797] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 176.161943][ T7571] trusted_key: encrypted_key: insufficient parameters specified [ 176.526462][ T5880] usb 2-1: USB disconnect, device number 32 [ 176.924412][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 177.081128][ T7583] openvswitch: netlink: IPv4 tunnel dst address is zero [ 177.257749][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 177.257761][ T29] audit: type=1804 audit(1772000130.838:76): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.446" name="/newroot/100/file1" dev="fuse" ino=1 res=1 errno=0 [ 177.886957][ T5831] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 178.047174][ T5831] usb 2-1: device descriptor read/64, error -71 [ 178.299931][ T5831] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 178.319192][ T7619] loop5: detected capacity change from 0 to 7 [ 178.327625][ T7619] Dev loop5: unable to read RDB block 7 [ 178.334290][ T7619] loop5: AHDI p3 p4 [ 178.347006][ T7619] loop5: partition table partially beyond EOD, truncated [ 178.361009][ T7619] loop5: p3 start 1459814400 is beyond EOD, truncated [ 178.458090][ T5831] usb 2-1: device descriptor read/64, error -71 [ 178.587477][ T5831] usb usb2-port1: attempt power cycle [ 178.748136][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.457'. [ 179.077117][ T5831] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 179.107664][ T5831] usb 2-1: device descriptor read/8, error -71 [ 179.372664][ T5831] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 179.416740][ T5831] usb 2-1: device descriptor read/8, error -71 [ 179.548022][ T5831] usb usb2-port1: unable to enumerate USB device [ 180.295299][ T7652] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 180.400720][ T7652] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.413378][ T7652] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 180.760938][ T5880] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 180.799784][ T7666] loop5: detected capacity change from 0 to 7 [ 180.886499][ T7666] Dev loop5: unable to read RDB block 7 [ 180.893166][ T7666] loop5: AHDI p3 p4 [ 180.907006][ T7666] loop5: partition table partially beyond EOD, truncated [ 180.916101][ T7666] loop5: p3 start 1459814400 is beyond EOD, truncated [ 180.947268][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 180.954073][ T5880] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.965417][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.975918][ T5880] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 180.985164][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.071990][ T5880] usb 4-1: config 0 descriptor?? [ 181.107975][ T7652] macvlan2: entered promiscuous mode [ 181.147084][ T7652] macvlan2: entered allmulticast mode [ 181.325010][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.470'. [ 181.349517][ T7652] bond1: entered promiscuous mode [ 181.362068][ T7652] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.382050][ T7652] bond1: left promiscuous mode [ 181.596995][ T5831] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 181.699867][ T5880] usbhid 4-1:0.0: can't add hid device: -71 [ 181.709662][ T5880] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 181.798318][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 181.808203][ T5831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 181.823367][ T5880] usb 4-1: USB disconnect, device number 19 [ 181.831457][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 181.874134][ T5831] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 181.888772][ T5831] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 181.897066][ T5831] usb 3-1: Manufacturer: syz [ 181.905804][ T5831] usb 3-1: config 0 descriptor?? [ 181.917567][ T5831] smsusb:smsusb_probe: board id=9, interface number 0 [ 182.077175][ T796] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 182.121745][ T5831] smsusb:smsusb_probe: Device initialized with return code -19 [ 182.132176][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.141890][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.151199][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.167723][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.188118][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.234517][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.283732][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.297182][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 182.303153][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.324317][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.346773][ T796] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.346874][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.394935][ T7685] syzkaller0: entered promiscuous mode [ 182.407033][ T7685] syzkaller0: entered allmulticast mode [ 182.417262][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.423682][ T5909] usb 3-1: USB disconnect, device number 12 [ 182.438760][ T796] usb 5-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 182.468351][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.495916][ T796] usb 5-1: config 0 descriptor?? [ 182.789398][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.798676][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.823624][ T7689] fuse: Bad value for 'rootmode' [ 182.828973][ T796] usbhid 5-1:0.0: can't add hid device: -71 [ 182.836839][ T796] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 182.865884][ T796] usb 5-1: USB disconnect, device number 20 [ 183.300610][ T5831] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 183.476999][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 183.485051][ T5831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.506204][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.520830][ T5831] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.531969][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.541231][ T5831] usb 3-1: Product: syz [ 183.545653][ T5831] usb 3-1: Manufacturer: syz [ 183.550986][ T5831] usb 3-1: SerialNumber: syz [ 183.561501][ T7701] loop5: detected capacity change from 0 to 7 [ 183.575024][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.584827][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 183.593179][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.602790][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 183.611567][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.621236][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 183.629332][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.638920][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 183.650999][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.660740][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 183.669143][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.678763][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 183.687137][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.696711][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 183.704577][ T7701] ldm_validate_partition_table(): Disk read failed. [ 183.714568][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.725180][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 183.736642][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.746312][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 183.764125][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.773779][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 183.786776][ T7701] Dev loop5: unable to read RDB block 0 [ 183.794334][ T7701] loop5: unable to read partition table [ 183.802360][ T7701] loop5: partition table beyond EOD, truncated [ 183.808865][ T7701] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 183.990316][ T5831] usb 3-1: cannot find UAC_HEADER [ 184.109117][ T5831] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 184.163755][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.203939][ T797] usb 3-1: USB disconnect, device number 13 [ 184.566755][ T7712] loop5: detected capacity change from 0 to 7 [ 184.615243][ T5955] Dev loop5: unable to read RDB block 7 [ 184.627049][ T5955] loop5: AHDI p3 p4 [ 184.630992][ T5955] loop5: partition table partially beyond EOD, truncated [ 184.667983][ T5955] loop5: p3 start 1459814400 is beyond EOD, truncated [ 184.684925][ T7712] Dev loop5: unable to read RDB block 7 [ 184.692742][ T7712] loop5: AHDI p3 p4 [ 184.696667][ T7712] loop5: partition table partially beyond EOD, truncated [ 184.704321][ T7712] loop5: p3 start 1459814400 is beyond EOD, truncated [ 184.707303][ T797] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 184.910237][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 184.942362][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.962817][ T797] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.975693][ T797] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 184.997895][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.005928][ T797] usb 4-1: Product: syz [ 185.020745][ T797] usb 4-1: Manufacturer: syz [ 185.031072][ T797] usb 4-1: SerialNumber: syz [ 185.046499][ T797] usb 4-1: config 0 descriptor?? [ 185.114130][ T7735] netlink: 56 bytes leftover after parsing attributes in process `syz.2.487'. [ 185.220897][ T7735] mmap: syz.2.487 (7735) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.911736][ T5831] usb 4-1: USB disconnect, device number 20 [ 185.978717][ T7754] netlink: 'syz.0.492': attribute type 3 has an invalid length. [ 186.006863][ T7754] netlink: 'syz.0.492': attribute type 3 has an invalid length. [ 186.030950][ T7754] netlink: 'syz.0.492': attribute type 3 has an invalid length. [ 186.038959][ T7754] netlink: 'syz.0.492': attribute type 3 has an invalid length. [ 186.047202][ T7754] netlink: 'syz.0.492': attribute type 3 has an invalid length. [ 186.065155][ T7754] netlink: 'syz.0.492': attribute type 3 has an invalid length. [ 186.183945][ T7754] netlink: 'syz.0.492': attribute type 3 has an invalid length. [ 186.207112][ T7754] netlink: 'syz.0.492': attribute type 3 has an invalid length. [ 186.247177][ T7754] netlink: 'syz.0.492': attribute type 3 has an invalid length. [ 186.302544][ T7757] loop5: detected capacity change from 0 to 7 [ 186.314929][ T7754] netlink: 'syz.0.492': attribute type 3 has an invalid length. [ 186.328752][ T7757] Dev loop5: unable to read RDB block 7 [ 186.349612][ T7757] loop5: AHDI p3 p4 [ 186.356855][ T7757] loop5: partition table partially beyond EOD, truncated [ 186.388078][ T7757] loop5: p3 start 1459814400 is beyond EOD, truncated [ 186.493200][ T797] IPVS: starting estimator thread 0... [ 186.728285][ T7760] IPVS: using max 37 ests per chain, 88800 per kthread [ 186.865852][ T7768] vlan3: entered promiscuous mode [ 186.878581][ T7765] netlink: 44 bytes leftover after parsing attributes in process `syz.0.494'. [ 186.968263][ T7765] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 187.270728][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 187.296004][ T7779] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 187.337155][ T7779] openvswitch: netlink: Message has 16 unknown bytes. [ 187.365107][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 187.487156][ T29] audit: type=1326 audit(1772000141.058:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 187.525294][ T7788] netlink: 204172 bytes leftover after parsing attributes in process `syz.3.503'. [ 187.544921][ T29] audit: type=1326 audit(1772000141.058:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 187.600659][ T29] audit: type=1326 audit(1772000141.058:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 187.625121][ T7796] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.693420][ T29] audit: type=1326 audit(1772000141.058:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 187.770206][ T29] audit: type=1326 audit(1772000141.058:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 187.797673][ T5909] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 187.854007][ T7800] bond1: entered promiscuous mode [ 187.863916][ T7802] loop5: detected capacity change from 0 to 7 [ 187.871159][ T7802] Dev loop5: unable to read RDB block 7 [ 187.876712][ T7802] loop5: AHDI p3 p4 [ 187.890292][ T7800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.921830][ T7802] loop5: partition table partially beyond EOD, truncated [ 188.060651][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 188.082825][ T29] audit: type=1326 audit(1772000141.058:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 188.092031][ T7802] loop5: p3 start 1459814400 is beyond EOD, [ 188.108109][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.137527][ T7802] truncated [ 188.141640][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.172424][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.506'. [ 188.176935][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.249825][ T29] audit: type=1326 audit(1772000141.088:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 188.257698][ T5909] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 188.277263][ T7800] bond1: entered allmulticast mode [ 188.321985][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.326574][ T29] audit: type=1326 audit(1772000141.088:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 188.363833][ T29] audit: type=1326 audit(1772000141.088:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 188.398528][ T7800] bond1: (slave bridge2): making interface the new active one [ 188.408504][ T7800] bridge2: entered promiscuous mode [ 188.415159][ T7800] bridge2: entered allmulticast mode [ 188.428882][ T29] audit: type=1326 audit(1772000141.088:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x7ffc0000 [ 188.438022][ T5909] usb 5-1: config 0 descriptor?? [ 188.484342][ T7800] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 188.827197][ T5831] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 188.911298][ T5909] nzxt-kraken2 0003:1E71:170E.0007: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.4-1/input0 [ 189.006199][ T5831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 189.025666][ T5831] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 189.042833][ T5831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.058711][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.067277][ T5831] usb 4-1: Product: ᐄ [ 189.071460][ T5831] usb 4-1: Manufacturer: 圉 [ 189.076048][ T5831] usb 4-1: SerialNumber: syz [ 189.129857][ T5909] usb 5-1: USB disconnect, device number 21 [ 189.348632][ T5831] cdc_ncm 4-1:1.0: bind() failure [ 189.379942][ T5831] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 189.397385][ T5831] cdc_ncm 4-1:1.1: bind() failure [ 189.407414][ T5831] usb 4-1: USB disconnect, device number 21 [ 189.556972][ T796] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 189.732701][ T796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.746557][ T796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 189.766970][ T796] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 189.777472][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 189.784938][ T796] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 189.810483][ T796] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.819835][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.827894][ T796] usb 2-1: Product: syz [ 189.832060][ T796] usb 2-1: Manufacturer: syz [ 189.836651][ T796] usb 2-1: SerialNumber: syz [ 189.921004][ T7828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.931998][ T796] cdc_mbim 2-1:1.0: skipping garbage [ 190.037026][ T5831] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 190.133765][ T7828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.141615][ T7828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.187044][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 190.199072][ T5831] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 190.215035][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.249649][ T5831] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.0/input/input16 [ 190.437649][ T5177] bcm5974 3-1:16.0: could not read from device [ 190.449290][ T5177] bcm5974 3-1:16.0: could not read from device [ 190.481035][ T5177] bcm5974 3-1:16.0: could not read from device [ 190.488725][ T5831] usb 3-1: USB disconnect, device number 14 [ 190.504361][ T5955] bcm5974 3-1:16.0: could not read from device [ 190.706562][ T7844] FAULT_INJECTION: forcing a failure. [ 190.706562][ T7844] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 190.726335][ T7844] CPU: 1 UID: 0 PID: 7844 Comm: syz.3.517 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.726359][ T7844] Tainted: [L]=SOFTLOCKUP [ 190.726365][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.726376][ T7844] Call Trace: [ 190.726384][ T7844] [ 190.726392][ T7844] dump_stack_lvl+0xe8/0x150 [ 190.726423][ T7844] should_fail_ex+0x412/0x560 [ 190.726447][ T7844] prepare_alloc_pages+0x22a/0x650 [ 190.726464][ T7844] __alloc_frozen_pages_noprof+0x12f/0x380 [ 190.726478][ T7844] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 190.726492][ T7844] ? __pfx_policy_nodemask+0x10/0x10 [ 190.726511][ T7844] ? __lock_acquire+0x6b5/0x2cf0 [ 190.726537][ T7844] alloc_pages_mpol+0x232/0x4a0 [ 190.726565][ T7844] vma_alloc_folio_noprof+0xea/0x210 [ 190.726589][ T7844] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 190.726609][ T7844] do_pte_missing+0x1656/0x3750 [ 190.726629][ T7844] handle_mm_fault+0x1bec/0x3310 [ 190.726650][ T7844] ? handle_mm_fault+0xee/0x3310 [ 190.726680][ T7844] ? __pfx_handle_mm_fault+0x10/0x10 [ 190.726725][ T7844] ? lock_mm_and_find_vma+0xa7/0x340 [ 190.726744][ T7844] do_user_addr_fault+0x75b/0x1340 [ 190.726765][ T7844] exc_page_fault+0x6a/0xc0 [ 190.726782][ T7844] asm_exc_page_fault+0x26/0x30 [ 190.726792][ T7844] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 190.726806][ T7844] Code: e9 14 49 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 190.726822][ T7844] RSP: 0018:ffffc9001c3cf898 EFLAGS: 00050202 [ 190.726839][ T7844] RAX: ffffffff84aba620 RBX: ffff88805825604c RCX: 0000000000000002 [ 190.726853][ T7844] RDX: 0000000000000000 RSI: ffff88805825604c RDI: 0000200000001600 [ 190.726865][ T7844] RBP: ffffc9001c3cfa10 R08: ffff88805825604d R09: 1ffff1100b04ac09 [ 190.726882][ T7844] R10: dffffc0000000000 R11: ffffed100b04ac0a R12: dffffc0000000000 [ 190.726894][ T7844] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000002 [ 190.726911][ T7844] ? _copy_to_iter+0x3d0/0x17d0 [ 190.726946][ T7844] _copy_to_iter+0x493/0x17d0 [ 190.726981][ T7844] ? __pfx__copy_to_iter+0x10/0x10 [ 190.727001][ T7844] ? traverse+0x544/0x580 [ 190.727029][ T7844] seq_read_iter+0x2e9/0xe10 [ 190.727056][ T7844] ? __asan_memset+0x22/0x50 [ 190.727089][ T7844] seq_read+0x367/0x480 [ 190.727115][ T7844] ? __pfx_seq_read+0x10/0x10 [ 190.727142][ T7844] ? apparmor_file_permission+0x1f4/0x300 [ 190.727183][ T7844] ? __pfx_seq_read+0x10/0x10 [ 190.727199][ T7844] proc_reg_read+0x1e9/0x2e0 [ 190.727223][ T7844] ? __pfx_proc_reg_read+0x10/0x10 [ 190.727249][ T7844] vfs_read+0x20c/0xa70 [ 190.727264][ T7844] ? ksys_write+0x1e6/0x270 [ 190.727286][ T7844] ? __pfx_vfs_read+0x10/0x10 [ 190.727304][ T7844] ? __fget_files+0x2a/0x420 [ 190.727329][ T7844] ? __fget_files+0x2a/0x420 [ 190.727351][ T7844] ? __fget_files+0x3a0/0x420 [ 190.727374][ T7844] ? __fget_files+0x2a/0x420 [ 190.727405][ T7844] __x64_sys_pread64+0x199/0x230 [ 190.727427][ T7844] ? __pfx___x64_sys_pread64+0x10/0x10 [ 190.727457][ T7844] do_syscall_64+0x14d/0xf80 [ 190.727481][ T7844] ? trace_irq_disable+0x3b/0x150 [ 190.727506][ T7844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.727525][ T7844] ? clear_bhb_loop+0x40/0x90 [ 190.727547][ T7844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.727565][ T7844] RIP: 0033:0x7fe22919c629 [ 190.727583][ T7844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.727598][ T7844] RSP: 002b:00007fe22a087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 190.727616][ T7844] RAX: ffffffffffffffda RBX: 00007fe229415fa0 RCX: 00007fe22919c629 [ 190.727628][ T7844] RDX: 0000000000001007 RSI: 0000200000001600 RDI: 0000000000000003 [ 190.727640][ T7844] RBP: 00007fe22a087090 R08: 0000000000000000 R09: 0000000000000000 [ 190.727651][ T7844] R10: 0000000000000097 R11: 0000000000000246 R12: 0000000000000001 [ 190.727662][ T7844] R13: 00007fe229416038 R14: 00007fe229415fa0 R15: 00007fe22953fa48 [ 190.727690][ T7844] [ 191.123643][ T7828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.131628][ T7828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.156914][ T796] cdc_mbim 2-1:1.0: setting tx_max = 48 [ 191.182407][ T796] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 191.194242][ T796] wwan wwan0: port wwan0mbim0 attached [ 191.300315][ T796] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 02:04:bc:ed:dd:41 [ 191.469316][ T796] usb 2-1: USB disconnect, device number 37 [ 191.476507][ T796] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 191.620321][ T796] wwan wwan0: port wwan0mbim0 disconnected [ 191.956182][ T7863] program syz.0.522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.386262][ T797] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 192.582395][ T5909] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 192.620447][ T797] usb 2-1: Using ep0 maxpacket: 32 [ 192.705250][ T797] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 192.782537][ T7887] team0: Device ipip0 is up. Set it down before adding it as a team port [ 192.796992][ T797] usb 2-1: config 0 has no interface number 0 [ 192.811606][ T797] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 192.847021][ T797] usb 2-1: config 0 interface 196 has no altsetting 0 [ 192.882976][ T797] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 192.893110][ T5909] usb 4-1: no configurations [ 192.897815][ T5909] usb 4-1: can't read configurations, error -22 [ 192.914166][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.937262][ T797] usb 2-1: Product: syz [ 192.945692][ T797] usb 2-1: Manufacturer: syz [ 192.961729][ T797] usb 2-1: SerialNumber: syz [ 192.977080][ T797] usb 2-1: config 0 descriptor?? [ 192.982971][ T7868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.077933][ T5909] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 193.319841][ T5909] usb 4-1: no configurations [ 193.324648][ T5909] usb 4-1: can't read configurations, error -22 [ 193.336697][ T5909] usb usb4-port1: attempt power cycle [ 193.652803][ T797] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 193.692069][ T797] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 193.727094][ T5909] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 193.776804][ T797] usb 2-1: USB disconnect, device number 38 [ 193.792583][ T5909] usb 4-1: no configurations [ 193.799804][ T5909] usb 4-1: can't read configurations, error -22 [ 193.933064][ T7907] Cannot find del_set index 0 as target [ 193.960952][ T5909] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 193.997949][ T5909] usb 4-1: no configurations [ 194.009146][ T5909] usb 4-1: can't read configurations, error -22 [ 194.047394][ T5909] usb usb4-port1: unable to enumerate USB device [ 194.187230][ T797] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 194.289982][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.296543][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.374568][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.421395][ T797] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.447107][ T7938] validate_nla: 45 callbacks suppressed [ 194.447125][ T7938] netlink: 'syz.4.535': attribute type 61 has an invalid length. [ 194.467367][ T797] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 194.502906][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.546297][ T797] usb 2-1: config 0 descriptor?? [ 194.873277][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.539'. [ 195.275846][ T5879] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 195.436598][ T7969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.452892][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 195.469501][ T5879] usb 5-1: config 0 has an invalid interface number: 76 but max is 0 [ 195.478526][ T5879] usb 5-1: config 0 has no interface number 0 [ 195.487576][ T5879] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 195.500355][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.516111][ T5879] usb 5-1: Product: syz [ 195.523665][ T5879] usb 5-1: Manufacturer: syz [ 195.532359][ T5879] usb 5-1: SerialNumber: syz [ 195.549097][ T5879] usb 5-1: config 0 descriptor?? [ 195.566278][ T5879] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 195.585567][ T5879] dw2102: su3000_power_ctrl: 1, initialized 0 [ 195.596700][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 195.622556][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.653898][ T5879] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 195.687810][ T5879] usb 5-1: media controller created [ 195.697235][ T5909] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 195.725906][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 195.763118][ T5879] dw2102: i2c transfer failed. [ 195.776557][ T7960] dvb-usb: bulk message failed: -22 (4/0) [ 195.784236][ T7960] dw2102: i2c transfer failed. [ 195.791946][ T7960] dvb-usb: bulk message failed: -22 (4/0) [ 195.798499][ T7960] dw2102: i2c transfer failed. [ 195.803688][ T7960] dvb-usb: bulk message failed: -22 (3/0) [ 195.810173][ T7960] dw2102: i2c transfer failed. [ 195.817373][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 195.831460][ T5879] dw2102: i2c transfer failed. [ 195.847020][ T5909] usb 4-1: device descriptor read/64, error -71 [ 195.855999][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 195.877519][ T5879] dw2102: i2c transfer failed. [ 195.896829][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 195.915702][ T5879] dw2102: i2c transfer failed. [ 195.928496][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 195.944136][ T5879] dw2102: i2c transfer failed. [ 195.956025][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 195.970900][ T5879] dw2102: i2c transfer failed. [ 195.984436][ T5879] dvb-usb: MAC address: 02:02:02:02:02:02 [ 196.016028][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.058391][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 196.073953][ T5879] dw2102: command 0x0e transfer failed. [ 196.085038][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 196.087003][ T5909] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 196.096987][ T5879] dw2102: command 0x0e transfer failed. [ 196.237016][ T5909] usb 4-1: device descriptor read/64, error -71 [ 196.358414][ T5909] usb usb4-port1: attempt power cycle [ 196.360833][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 196.370357][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 196.376429][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 196.376996][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 196.382722][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 196.418944][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 196.424817][ T5879] dw2102: command 0x0e transfer failed. [ 196.434860][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 196.441467][ T5879] dw2102: command 0x0e transfer failed. [ 196.447303][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 196.457349][ T5879] dw2102: command 0x51 transfer failed. [ 196.528173][ T5879] DVB: Unable to find symbol ds3000_attach() [ 196.537276][ T5879] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 196.634260][ T7981] netlink: 36 bytes leftover after parsing attributes in process `syz.4.547'. [ 196.648697][ T5879] rc_core: IR keymap rc-su3000 not found [ 196.657549][ T5879] Registered IR keymap rc-empty [ 196.680656][ T5879] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 196.709325][ T5879] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input17 [ 196.731492][ T5909] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 196.736631][ T5879] dvb-usb: schedule remote query interval to 150 msecs. [ 196.754968][ T5879] dw2102: su3000_power_ctrl: 0, initialized 1 [ 196.777456][ T5909] usb 4-1: device descriptor read/8, error -71 [ 196.807142][ T5879] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 196.849963][ T5879] usb 5-1: USB disconnect, device number 22 [ 196.940537][ T5879] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 196.980823][ T796] usb 2-1: USB disconnect, device number 39 [ 197.027036][ T5909] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 197.074747][ T5909] usb 4-1: device descriptor read/8, error -71 [ 197.198363][ T5909] usb usb4-port1: unable to enumerate USB device [ 197.218937][ T7993] ======================================================= [ 197.218937][ T7993] WARNING: The mand mount option has been deprecated and [ 197.218937][ T7993] and is ignored by this kernel. Remove the mand [ 197.218937][ T7993] option from the mount to silence this warning. [ 197.218937][ T7993] ======================================================= [ 197.255979][ T7993] fuse: Unknown parameter 'g.r00000000000000000000' [ 197.351587][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 197.457322][ T796] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 197.610328][ T796] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 197.620569][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.628878][ T796] usb 2-1: Product: syz [ 197.646941][ T796] usb 2-1: Manufacturer: syz [ 197.651576][ T796] usb 2-1: SerialNumber: syz [ 197.874296][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.884758][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.885329][ T796] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 197.905687][ T796] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 198.131863][ T796] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 198.146688][ T796] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 198.166236][ T796] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 198.183049][ T796] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 198.201096][ T796] usb 2-1: USB disconnect, device number 40 [ 198.599019][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806693b800: rx timeout, send abort [ 198.608635][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806693b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 198.757739][ T797] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 198.777053][ T5831] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 198.921684][ T797] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.938897][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.939681][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.955030][ T797] usb 4-1: Product: syz [ 198.960629][ T5831] usb 2-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 198.971149][ T797] usb 4-1: Manufacturer: syz [ 198.971593][ T5831] usb 2-1: config 66 interface 0 has no altsetting 0 [ 198.975764][ T797] usb 4-1: SerialNumber: syz [ 198.991919][ T797] usb 4-1: config 0 descriptor?? [ 198.998060][ T5831] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 199.015545][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.047457][ T5831] usb 2-1: Product: syz [ 199.066118][ T5831] usb 2-1: Manufacturer: syz [ 199.075910][ T5831] usb 2-1: SerialNumber: syz [ 199.107644][ T8021] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 199.235167][ T797] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 199.319517][ T5909] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 199.325395][ T5831] ati_remote2 2-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 199.354085][ T5831] usb 2-1: USB disconnect, device number 41 [ 199.508667][ T5909] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 199.526987][ T5909] usb 5-1: config 0 has no interface number 0 [ 199.540453][ T5909] usb 5-1: config 0 interface 41 has no altsetting 0 [ 199.648513][ T5909] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 199.661422][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.698241][ T5909] usb 5-1: Product: syz [ 199.704823][ T5909] usb 5-1: Manufacturer: syz [ 199.714982][ T5909] usb 5-1: SerialNumber: syz [ 199.770309][ T5909] usb 5-1: config 0 descriptor?? [ 200.057929][ T5909] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 200.077561][ T5909] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 200.127693][ T5909] usb 5-1: USB disconnect, device number 23 [ 200.457688][ T5909] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 200.486972][ T5880] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 200.586180][ T8055] atomic_op ffff8880682bd198 conn xmit_atomic 0000000000000000 [ 200.638768][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 200.660087][ T5909] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 200.660861][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.711058][ T5880] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.711755][ T5909] usb 5-1: config 0 has no interface number 0 [ 200.722949][ T5880] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 200.755933][ T797] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 200.756041][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.774418][ T5909] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.779891][ T5880] usb 2-1: Product: syz [ 200.792949][ T797] usb 4-1: USB disconnect, device number 30 [ 200.802404][ T5909] usb 5-1: config 0 interface 85 has no altsetting 0 [ 200.891598][ T5880] usb 2-1: Manufacturer: syz [ 200.900251][ T5880] usb 2-1: SerialNumber: syz [ 200.905000][ T5909] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 200.916542][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.929054][ T5909] usb 5-1: Product: syz [ 200.933359][ T5909] usb 5-1: Manufacturer: syz [ 200.938776][ T5909] usb 5-1: SerialNumber: syz [ 200.946442][ T5880] usb 2-1: config 0 descriptor?? [ 200.948036][ T5909] usb 5-1: config 0 descriptor?? [ 201.166381][ T5909] appletouch 5-1:0.85: Failed to read mode from device. [ 201.183302][ T5909] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 201.250006][ T8066] loop5: detected capacity change from 0 to 7 [ 201.262217][ T8066] buffer_io_error: 10 callbacks suppressed [ 201.262234][ T8066] Buffer I/O error on dev loop5, logical block 0, async page read [ 201.304029][ T8066] Buffer I/O error on dev loop5, logical block 0, async page read [ 201.312629][ T8066] Buffer I/O error on dev loop5, logical block 0, async page read [ 201.336408][ T8066] Buffer I/O error on dev loop5, logical block 0, async page read [ 201.404654][ T8051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.417177][ T8066] Buffer I/O error on dev loop5, logical block 0, async page read [ 201.441254][ T8069] Buffer I/O error on dev loop5, logical block 0, async page read [ 201.455472][ T8069] Buffer I/O error on dev loop5, logical block 0, async page read [ 201.505096][ T8066] Buffer I/O error on dev loop5, logical block 0, async page read [ 201.537046][ T8069] Buffer I/O error on dev loop5, logical block 0, async page read [ 201.545990][ T8071] Buffer I/O error on dev loop5, logical block 0, async page read [ 201.566959][ T797] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 201.576330][ T8066] ldm_validate_partition_table(): Disk read failed. [ 201.614691][ T8066] Dev loop5: unable to read RDB block 0 [ 201.669543][ T8066] loop5: unable to read partition table [ 201.688555][ T5909] usb 5-1: USB disconnect, device number 24 [ 201.692505][ T8066] loop5: partition table beyond EOD, [ 201.730725][ T797] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 201.750648][ T8066] truncated [ 201.758696][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.766385][ T8066] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 201.787681][ T797] usb 4-1: config 0 descriptor?? [ 201.803258][ T5192] ldm_validate_partition_table(): Disk read failed. [ 201.818503][ T5192] Dev loop5: unable to read RDB block 0 [ 201.824182][ T5192] loop5: unable to read partition table [ 201.832875][ T5192] loop5: partition table beyond EOD, truncated [ 201.843407][ T5831] usb 2-1: USB disconnect, device number 42 [ 202.006825][ T797] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 202.207627][ T797] [drm:udl_init] *ERROR* Selecting channel failed [ 202.238938][ T797] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 202.245678][ T797] [drm] Initialized udl on minor 2 [ 202.254186][ T797] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 202.278883][ T797] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 202.291128][ T5942] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 202.300799][ T797] usb 4-1: USB disconnect, device number 31 [ 202.309876][ T5942] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 202.627266][ T5831] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 202.788426][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.814692][ T5831] usb 5-1: config 0 has no interfaces? [ 202.824966][ T5831] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 202.834881][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.856331][ T5831] usb 5-1: config 0 descriptor?? [ 202.997220][ T5880] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 203.164975][ T8079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.178231][ T8079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.204376][ T5831] usb 5-1: USB disconnect, device number 25 [ 203.217341][ T5880] usb 2-1: unable to get BOS descriptor set [ 203.231645][ T5880] usb 2-1: not running at top speed; connect to a high speed hub [ 203.248597][ T5880] usb 2-1: config 1 interface 0 has no altsetting 0 [ 203.261475][ T5880] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.275480][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.289886][ T5880] usb 2-1: Product: syz [ 203.296132][ T5880] usb 2-1: Manufacturer: syz [ 203.304181][ T5880] usb 2-1: SerialNumber: syz [ 203.361262][ T8108] netlink: 'syz.2.588': attribute type 1 has an invalid length. [ 203.370231][ T8108] netlink: 5 bytes leftover after parsing attributes in process `syz.2.588'. [ 203.436001][ T8110] fuse: Bad value for 'rootmode' [ 203.542626][ T5880] usb 2-1: USB disconnect, device number 43 [ 203.739093][ T8112] xt_hashlimit: size too large, truncated to 1048576 [ 204.023992][ T8119] netlink: 80 bytes leftover after parsing attributes in process `syz.4.590'. [ 204.408378][ T8134] sctp: [Deprecated]: syz.1.596 (pid 8134) Use of int in max_burst socket option deprecated. [ 204.408378][ T8134] Use struct sctp_assoc_value instead [ 204.625948][ T8139] bond2: option tlb_dynamic_lb: invalid value (138) [ 204.695938][ T8139] bond2 (unregistering): Released all slaves [ 205.618549][ T8155] FAULT_INJECTION: forcing a failure. [ 205.618549][ T8155] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 205.632414][ T8157] program syz.4.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.657031][ T8155] CPU: 0 UID: 0 PID: 8155 Comm: syz.2.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.657057][ T8155] Tainted: [L]=SOFTLOCKUP [ 205.657061][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.657067][ T8155] Call Trace: [ 205.657072][ T8155] [ 205.657078][ T8155] dump_stack_lvl+0xe8/0x150 [ 205.657097][ T8155] should_fail_ex+0x412/0x560 [ 205.657111][ T8155] _copy_to_user+0x31/0xb0 [ 205.657127][ T8155] simple_read_from_buffer+0xe1/0x170 [ 205.657144][ T8155] proc_fail_nth_read+0x1bb/0x230 [ 205.657159][ T8155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.657174][ T8155] ? rw_verify_area+0x2a6/0x4d0 [ 205.657184][ T8155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.657198][ T8155] vfs_read+0x20c/0xa70 [ 205.657207][ T8155] ? fdget_pos+0x246/0x320 [ 205.657223][ T8155] ? __pfx___mutex_lock+0x10/0x10 [ 205.657234][ T8155] ? __pfx_vfs_read+0x10/0x10 [ 205.657244][ T8155] ? __fget_files+0x2a/0x420 [ 205.657260][ T8155] ? __fget_files+0x3a0/0x420 [ 205.657273][ T8155] ? __fget_files+0x2a/0x420 [ 205.657291][ T8155] ksys_read+0x150/0x270 [ 205.657302][ T8155] ? __pfx_ksys_read+0x10/0x10 [ 205.657316][ T8155] do_syscall_64+0x14d/0xf80 [ 205.657331][ T8155] ? trace_irq_disable+0x3b/0x150 [ 205.657346][ T8155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.657356][ T8155] ? clear_bhb_loop+0x40/0x90 [ 205.657369][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.657379][ T8155] RIP: 0033:0x7f1fbeb5cece [ 205.657389][ T8155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.657397][ T8155] RSP: 002b:00007f1fbfa0afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.657409][ T8155] RAX: ffffffffffffffda RBX: 00007f1fbfa0b6c0 RCX: 00007f1fbeb5cece [ 205.657417][ T8155] RDX: 000000000000000f RSI: 00007f1fbfa0b0a0 RDI: 0000000000000004 [ 205.657423][ T8155] RBP: 00007f1fbfa0b090 R08: 0000000000000000 R09: 0000000000000000 [ 205.657429][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.657435][ T8155] R13: 00007f1fbee16038 R14: 00007f1fbee15fa0 R15: 00007f1fbef3fa48 [ 205.657450][ T8155] [ 206.066957][ T796] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 206.245471][ T796] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 206.282922][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.307011][ T796] usb 5-1: config 0 descriptor?? [ 206.320344][ T796] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 206.517906][ T796] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 206.841024][ T8180] warning: `syz.3.609' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 206.925833][ T796] gspca_cpia1: usb_control_msg 02, error -71 [ 206.934226][ T796] gspca_cpia1: usb_control_msg 05, error -71 [ 206.942722][ T796] cpia1 5-1:0.0: unexpected systemstate: 00 [ 206.972904][ T796] usb 5-1: USB disconnect, device number 26 [ 207.045262][ T8182] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16394 (32788 ns) > initial count (48 ns). Using initial count to start timer. [ 208.077443][ T8200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.132786][ T8201] syzkaller0: entered promiscuous mode [ 208.141007][ T8201] syzkaller0: entered allmulticast mode [ 208.233730][ T8205] syzkaller0: entered promiscuous mode [ 208.240286][ T8205] syzkaller0: entered allmulticast mode [ 208.281732][ T8210] loop5: detected capacity change from 0 to 7 [ 208.294755][ T8210] Dev loop5: unable to read RDB block 7 [ 208.313303][ T8210] loop5: AHDI p3 p4 [ 208.317484][ T8210] loop5: partition table partially beyond EOD, truncated [ 208.326347][ T8210] loop5: p3 start 1459814400 is beyond EOD, truncated [ 208.570438][ T5942] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 208.607549][ T8219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.699334][ T8222] xt_TPROXY: Can be used only with -p tcp or -p udp [ 208.711867][ T5942] usb 2-1: device descriptor read/64, error -71 [ 208.957543][ T5942] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 209.098788][ T5942] usb 2-1: device descriptor read/64, error -71 [ 209.214087][ T5942] usb usb2-port1: attempt power cycle [ 209.567023][ T5942] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 209.587598][ T5942] usb 2-1: device descriptor read/8, error -71 [ 209.827008][ T5942] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 209.871798][ T5942] usb 2-1: device descriptor read/8, error -71 [ 210.007608][ T5942] usb usb2-port1: unable to enumerate USB device [ 211.056990][ T796] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 211.217573][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 211.229400][ T796] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 211.239917][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.265987][ T796] usb 4-1: Product: syz [ 211.270293][ T796] usb 4-1: Manufacturer: syz [ 211.274942][ T796] usb 4-1: SerialNumber: syz [ 211.291926][ T796] usb 4-1: config 0 descriptor?? [ 211.561246][ T796] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 211.834887][ T8225] vxcan3: entered promiscuous mode [ 211.888706][ T8225] vxcan3: entered allmulticast mode [ 212.252193][ T8263] syzkaller0: entered promiscuous mode [ 212.264565][ T8263] syzkaller0: entered allmulticast mode [ 213.767799][ T8274] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 213.780302][ T8274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.034988][ T796] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 214.049761][ T796] usb 4-1: USB disconnect, device number 32 [ 214.151394][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 214.151413][ T29] audit: type=1326 audit(1772000167.728:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.4.639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff68b79c629 code=0x0 [ 214.259596][ T8283] loop5: detected capacity change from 0 to 7 [ 214.283371][ T8283] Dev loop5: unable to read RDB block 7 [ 214.309228][ T8283] loop5: AHDI p3 p4 [ 214.313265][ T8283] loop5: partition table partially beyond EOD, truncated [ 214.334001][ T8283] loop5: p3 start 1459814400 is beyond EOD, truncated [ 214.650267][ T29] audit: type=1326 audit(1772000168.178:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f259c629 code=0x7ffc0000 [ 214.693239][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 214.727067][ T29] audit: type=1326 audit(1772000168.178:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8f255cece code=0x7ffc0000 [ 214.781243][ T8300] dummy0: entered promiscuous mode [ 214.851994][ T8300] macsec1: entered promiscuous mode [ 214.861267][ T8300] macsec1: entered allmulticast mode [ 214.868305][ T8300] dummy0: entered allmulticast mode [ 214.874300][ T29] audit: type=1326 audit(1772000168.178:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f259c629 code=0x7ffc0000 [ 214.922126][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 214.925362][ T29] audit: type=1326 audit(1772000168.178:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f259c629 code=0x7ffc0000 [ 214.987138][ T29] audit: type=1326 audit(1772000168.178:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8f255cece code=0x7ffc0000 [ 215.010577][ T29] audit: type=1326 audit(1772000168.178:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f259c629 code=0x7ffc0000 [ 215.033891][ T29] audit: type=1326 audit(1772000168.178:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8f259c629 code=0x7ffc0000 [ 215.059332][ T29] audit: type=1326 audit(1772000168.178:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f259c629 code=0x7ffc0000 [ 215.086969][ T5879] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 215.126025][ T29] audit: type=1326 audit(1772000168.188:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb8f259c629 code=0x7ffc0000 [ 215.248707][ T5879] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 215.258082][ T5879] usb 2-1: config 0 has no interface number 0 [ 215.264551][ T5879] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.300381][ T5879] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 215.311123][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.324415][ T5879] usb 2-1: Product: syz [ 215.370739][ T5879] usb 2-1: Manufacturer: syz [ 215.386367][ T5879] usb 2-1: SerialNumber: syz [ 215.418456][ T5879] usb 2-1: config 0 descriptor?? [ 215.469614][ T5879] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 215.588851][ T797] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 215.629978][ T8315] netlink: 'syz.2.651': attribute type 1 has an invalid length. [ 215.668676][ T8315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.750310][ T8321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'. [ 215.760619][ T797] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 215.769333][ T797] usb 4-1: config 0 has no interface number 0 [ 215.779017][ T797] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.791737][ T797] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.811839][ T797] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 215.833375][ T797] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 215.848043][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.874783][ T797] usb 4-1: config 0 descriptor?? [ 215.899782][ T797] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input20 [ 216.112376][ T797] usb 4-1: USB disconnect, device number 33 [ 216.307124][ T5909] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 216.456986][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 216.469274][ T5909] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 216.487981][ T5909] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 216.503403][ T5909] usb 5-1: config 1 has no interface number 1 [ 216.513924][ T5909] usb 5-1: too many endpoints for config 1 interface 2 altsetting 12: 66, using maximum allowed: 30 [ 216.533249][ T5909] usb 5-1: config 1 interface 2 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 216.598894][ T5909] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.618497][ T5909] usb 5-1: config 1 interface 2 has no altsetting 2 [ 216.632723][ T5909] usb 5-1: Dual-Role OTG device on HNP port [ 216.643909][ T5909] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.682996][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.710312][ T5909] usb 5-1: Product: syz [ 216.721306][ T5909] usb 5-1: Manufacturer: syz [ 216.744423][ T5909] usb 5-1: SerialNumber: syz [ 216.776664][ T8329] loop5: detected capacity change from 0 to 7 [ 216.788119][ T5989] Dev loop5: unable to read RDB block 7 [ 216.799814][ T5989] loop5: AHDI p3 p4 [ 216.809500][ T5989] loop5: partition table partially beyond EOD, truncated [ 216.824262][ T5989] loop5: p3 start 1459814400 is beyond EOD, truncated [ 216.841834][ T8329] Dev loop5: unable to read RDB block 7 [ 216.847746][ T8329] loop5: AHDI p3 p4 [ 216.851787][ T8329] loop5: partition table partially beyond EOD, truncated [ 216.861328][ T8329] loop5: p3 start 1459814400 is beyond EOD, truncated [ 217.063990][ T8331] kAFS: unable to lookup cell '(,cL' [ 217.096040][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 217.113842][ T5909] usb 5-1: USB disconnect, device number 27 [ 217.428088][ T8339] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 217.470101][ T8342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.659'. [ 217.590045][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 217.717218][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 217.726427][ T5909] usb 2-1: USB disconnect, device number 48 [ 217.748968][ T5909] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 217.856976][ T797] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 217.977629][ T5912] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 218.090664][ T797] usb 3-1: config 0 has an invalid interface number: 228 but max is 0 [ 218.103803][ T797] usb 3-1: config 0 has no interface number 0 [ 218.113896][ T797] usb 3-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=ee.a2 [ 218.124033][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.144009][ T797] usb 3-1: Product: syz [ 218.148575][ T797] usb 3-1: Manufacturer: syz [ 218.153251][ T797] usb 3-1: SerialNumber: syz [ 218.165141][ T797] usb 3-1: config 0 descriptor?? [ 218.530785][ T797] mct_u232 3-1:0.228: MCT U232 converter detected [ 218.545594][ T797] mct_u232 ttyUSB0: expected endpoint missing [ 218.562413][ T797] usb 3-1: USB disconnect, device number 15 [ 218.579879][ T797] mct_u232 3-1:0.228: device disconnected [ 218.705055][ T8369] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 220.982317][ T8388] netlink: 'syz.1.670': attribute type 4 has an invalid length. [ 221.223749][ T8391] sctp: [Deprecated]: syz.3.672 (pid 8391) Use of int in max_burst socket option. [ 221.223749][ T8391] Use struct sctp_assoc_value instead [ 221.504033][ T8398] kAFS: unable to lookup cell '(,c' [ 222.314697][ T8411] FAULT_INJECTION: forcing a failure. [ 222.314697][ T8411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.380946][ T8411] CPU: 1 UID: 0 PID: 8411 Comm: syz.2.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.380967][ T8411] Tainted: [L]=SOFTLOCKUP [ 222.380971][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.380978][ T8411] Call Trace: [ 222.380982][ T8411] [ 222.380986][ T8411] dump_stack_lvl+0xe8/0x150 [ 222.381006][ T8411] should_fail_ex+0x412/0x560 [ 222.381020][ T8411] _copy_from_user+0x2d/0xb0 [ 222.381036][ T8411] ___sys_sendmsg+0x1c6/0x360 [ 222.381054][ T8411] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.381084][ T8411] ? __fget_files+0x2a/0x420 [ 222.381098][ T8411] ? __fget_files+0x3a0/0x420 [ 222.381116][ T8411] __x64_sys_sendmsg+0x1bd/0x2a0 [ 222.381131][ T8411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.381150][ T8411] ? __pfx_ksys_write+0x10/0x10 [ 222.381166][ T8411] do_syscall_64+0x14d/0xf80 [ 222.381186][ T8411] ? trace_irq_disable+0x3b/0x150 [ 222.381201][ T8411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.381212][ T8411] ? clear_bhb_loop+0x40/0x90 [ 222.381224][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.381234][ T8411] RIP: 0033:0x7f1fbeb9c629 [ 222.381244][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.381253][ T8411] RSP: 002b:00007f1fbfa0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.381265][ T8411] RAX: ffffffffffffffda RBX: 00007f1fbee15fa0 RCX: 00007f1fbeb9c629 [ 222.381273][ T8411] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 222.381279][ T8411] RBP: 00007f1fbfa0b090 R08: 0000000000000000 R09: 0000000000000000 [ 222.381285][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.381291][ T8411] R13: 00007f1fbee16038 R14: 00007f1fbee15fa0 R15: 00007f1fbef3fa48 [ 222.381306][ T8411] [ 222.886969][ T5879] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 223.072568][ T5879] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 223.141594][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.202485][ T5879] usb 3-1: Product: syz [ 223.215649][ T5879] usb 3-1: Manufacturer: syz [ 223.233238][ T797] IPVS: starting estimator thread 0... [ 223.241142][ T5879] usb 3-1: SerialNumber: syz [ 223.258865][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.682'. [ 223.298192][ T5879] usb 3-1: config 0 descriptor?? [ 223.312454][ T8426] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 223.319360][ T8426] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 223.336393][ T5879] usb 3-1: selecting invalid altsetting 1 [ 223.356969][ T8425] IPVS: using max 55 ests per chain, 132000 per kthread [ 223.375055][ T8429] netlink: 'syz.0.683': attribute type 1 has an invalid length. [ 223.391421][ T5879] technisat-usb2: could not set alternate setting to 0 [ 223.407222][ T8430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.683'. [ 223.562506][ T8429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.950644][ T5879] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 224.005884][ T5879] usb 3-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 224.074550][ T5879] usb 3-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 225.975083][ T8467] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 226.045043][ T8467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.120712][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.692'. [ 226.633479][ T8481] kAFS: unable to lookup cell '(,c' [ 227.657518][ T8498] loop5: detected capacity change from 0 to 7 [ 227.664428][ T8498] Dev loop5: unable to read RDB block 7 [ 227.672549][ T8498] loop5: AHDI p3 p4 [ 227.682686][ T8498] loop5: partition table partially beyond EOD, truncated [ 227.727361][ T8498] loop5: p3 start 1459814400 is beyond EOD, truncated [ 228.118125][ T8512] netlink: 'syz.1.702': attribute type 1 has an invalid length. [ 228.310491][ T8512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.329206][ T8519] vlan2: entered allmulticast mode [ 228.334437][ T8519] veth0_to_bond: entered allmulticast mode [ 228.417261][ T8519] bond2: (slave vlan2): making interface the new active one [ 228.426365][ T8519] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 228.700938][ T8513] netlink: 'syz.3.703': attribute type 1 has an invalid length. [ 228.757516][ T8513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.277161][ T5912] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 229.448383][ T5912] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 229.458737][ T5912] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 229.467840][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.489061][ T5912] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 229.689605][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.713482][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.751922][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.809031][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.924554][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.984263][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.161834][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.190635][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.216679][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.238085][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.450749][ T8551] loop5: detected capacity change from 0 to 7 [ 230.476023][ T8551] Dev loop5: unable to read RDB block 7 [ 230.492523][ T8551] loop5: AHDI p3 p4 [ 230.496753][ T8551] loop5: partition table partially beyond EOD, truncated [ 230.504495][ T8551] loop5: p3 start 1459814400 is beyond EOD, truncated [ 230.525554][ T5912] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 230.587584][ T8557] kAFS: unable to lookup cell '(,c' [ 230.729185][ T5912] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 230.746283][ T5912] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 230.816357][ T5912] usb 2-1: USB disconnect, device number 49 [ 231.700057][ T8577] FAULT_INJECTION: forcing a failure. [ 231.700057][ T8577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.751681][ T8577] CPU: 1 UID: 0 PID: 8577 Comm: syz.0.718 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.751713][ T8577] Tainted: [L]=SOFTLOCKUP [ 231.751719][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.751731][ T8577] Call Trace: [ 231.751738][ T8577] [ 231.751745][ T8577] dump_stack_lvl+0xe8/0x150 [ 231.751776][ T8577] should_fail_ex+0x412/0x560 [ 231.751799][ T8577] _copy_from_iter+0x1d3/0x1670 [ 231.751822][ T8577] ? rcu_is_watching+0x15/0xb0 [ 231.751851][ T8577] ? __pfx__copy_from_iter+0x10/0x10 [ 231.751880][ T8577] ? netlink_sendmsg+0x650/0xb40 [ 231.751901][ T8577] ? skb_put+0x11b/0x210 [ 231.751927][ T8577] netlink_sendmsg+0x6c0/0xb40 [ 231.751954][ T8577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.751977][ T8577] ? aa_sock_msg_perm+0xf1/0x1b0 [ 231.751999][ T8577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.752020][ T8577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.752041][ T8577] ____sys_sendmsg+0xa68/0xad0 [ 231.752071][ T8577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.752104][ T8577] ? import_iovec+0x73/0xa0 [ 231.752131][ T8577] ___sys_sendmsg+0x2a5/0x360 [ 231.752165][ T8577] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.752226][ T8577] ? __fget_files+0x2a/0x420 [ 231.752250][ T8577] ? __fget_files+0x3a0/0x420 [ 231.752283][ T8577] __x64_sys_sendmsg+0x1bd/0x2a0 [ 231.752310][ T8577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.752359][ T8577] ? __pfx_ksys_write+0x10/0x10 [ 231.752388][ T8577] do_syscall_64+0x14d/0xf80 [ 231.752414][ T8577] ? trace_irq_disable+0x3b/0x150 [ 231.752438][ T8577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.752457][ T8577] ? clear_bhb_loop+0x40/0x90 [ 231.752479][ T8577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.752497][ T8577] RIP: 0033:0x7fb8f259c629 [ 231.752516][ T8577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.752532][ T8577] RSP: 002b:00007fb8f347d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.752551][ T8577] RAX: ffffffffffffffda RBX: 00007fb8f2815fa0 RCX: 00007fb8f259c629 [ 231.752565][ T8577] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 231.752577][ T8577] RBP: 00007fb8f347d090 R08: 0000000000000000 R09: 0000000000000000 [ 231.752588][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.752599][ T8577] R13: 00007fb8f2816038 R14: 00007fb8f2815fa0 R15: 00007fb8f293fa48 [ 231.752627][ T8577] [ 232.827453][ T5912] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 233.031352][ T5912] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.055282][ T5912] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 233.116290][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.141466][ T5912] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64 [ 233.234089][ T5912] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.255600][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.281189][ T5912] usb 5-1: Product: syz [ 233.290954][ T5912] usb 5-1: Manufacturer: syz [ 233.327491][ T5912] cdc_wdm 5-1:1.0: skipping garbage [ 233.356635][ T5912] cdc_wdm 5-1:1.0: skipping garbage [ 233.393925][ T5912] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 233.551180][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.721'. [ 233.592994][ T8588] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.647235][ T5880] usb 5-1: USB disconnect, device number 28 [ 234.507584][ T796] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 234.580679][ T8630] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 234.684221][ T796] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 234.703061][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.740871][ T796] usb 2-1: Product: syz [ 234.749958][ T796] usb 2-1: Manufacturer: syz [ 234.762399][ T796] usb 2-1: SerialNumber: syz [ 234.782190][ T796] usb 2-1: config 0 descriptor?? [ 234.791635][ T796] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 235.574334][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.739'. [ 236.186972][ T797] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 236.357605][ T797] usb 5-1: device descriptor read/64, error -71 [ 236.617508][ T797] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 236.732833][ T8669] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 236.757161][ T797] usb 5-1: device descriptor read/64, error -71 [ 236.877548][ T797] usb usb5-port1: attempt power cycle [ 237.216983][ T797] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 237.392237][ T797] usb 5-1: device descriptor read/8, error -71 [ 237.397239][ T796] usb 2-1: USB disconnect, device number 50 [ 237.612020][ T8679] FAULT_INJECTION: forcing a failure. [ 237.612020][ T8679] name failslab, interval 1, probability 0, space 0, times 0 [ 237.625915][ T8679] CPU: 1 UID: 0 PID: 8679 Comm: syz.0.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.625944][ T8679] Tainted: [L]=SOFTLOCKUP [ 237.625949][ T8679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.625955][ T8679] Call Trace: [ 237.625961][ T8679] [ 237.625967][ T8679] dump_stack_lvl+0xe8/0x150 [ 237.625986][ T8679] should_fail_ex+0x412/0x560 [ 237.626001][ T8679] should_failslab+0xa8/0x100 [ 237.626015][ T8679] __kmalloc_noprof+0xe8/0x760 [ 237.626030][ T8679] ? __kasan_kmalloc+0x93/0xb0 [ 237.626048][ T8679] ? nla_strdup+0x9d/0x140 [ 237.626069][ T8679] ? __kmalloc_cache_noprof+0x31c/0x660 [ 237.626090][ T8679] nla_strdup+0x9d/0x140 [ 237.626114][ T8679] nf_tables_newchain+0x1a9a/0x2890 [ 237.626139][ T8679] ? __pfx_nf_tables_newchain+0x10/0x10 [ 237.626169][ T8679] ? nfnl_pernet+0x23/0x240 [ 237.626184][ T8679] ? __nla_parse+0x40/0x60 [ 237.626199][ T8679] nfnetlink_rcv+0x1240/0x27b0 [ 237.626225][ T8679] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 237.626243][ T8679] ? ref_tracker_free+0x693/0x840 [ 237.626267][ T8679] ? lockdep_hardirqs_on+0x7a/0x110 [ 237.626282][ T8679] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 237.626313][ T8679] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 237.626336][ T8679] netlink_unicast+0x80f/0x9b0 [ 237.626351][ T8679] ? __pfx_netlink_unicast+0x10/0x10 [ 237.626362][ T8679] ? netlink_sendmsg+0x650/0xb40 [ 237.626374][ T8679] ? skb_put+0x11b/0x210 [ 237.626389][ T8679] netlink_sendmsg+0x813/0xb40 [ 237.626406][ T8679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.626419][ T8679] ? aa_sock_msg_perm+0xf1/0x1b0 [ 237.626432][ T8679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.626444][ T8679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.626456][ T8679] ____sys_sendmsg+0xa68/0xad0 [ 237.626475][ T8679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.626494][ T8679] ? import_iovec+0x73/0xa0 [ 237.626510][ T8679] ___sys_sendmsg+0x2a5/0x360 [ 237.626527][ T8679] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.626559][ T8679] ? __fget_files+0x2a/0x420 [ 237.626577][ T8679] ? __fget_files+0x3a0/0x420 [ 237.626596][ T8679] __x64_sys_sendmsg+0x1bd/0x2a0 [ 237.626612][ T8679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.626631][ T8679] ? __pfx_ksys_write+0x10/0x10 [ 237.626647][ T8679] do_syscall_64+0x14d/0xf80 [ 237.626662][ T8679] ? trace_irq_disable+0x3b/0x150 [ 237.626676][ T8679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.626687][ T8679] ? clear_bhb_loop+0x40/0x90 [ 237.626699][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.626709][ T8679] RIP: 0033:0x7fb8f259c629 [ 237.626719][ T8679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.626728][ T8679] RSP: 002b:00007fb8f347d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.626740][ T8679] RAX: ffffffffffffffda RBX: 00007fb8f2815fa0 RCX: 00007fb8f259c629 [ 237.626748][ T8679] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 237.626754][ T8679] RBP: 00007fb8f347d090 R08: 0000000000000000 R09: 0000000000000000 [ 237.626760][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.626766][ T8679] R13: 00007fb8f2816038 R14: 00007fb8f2815fa0 R15: 00007fb8f293fa48 [ 237.626781][ T8679] [ 238.006112][ T797] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 238.031471][ T797] usb 5-1: device descriptor read/8, error -71 [ 238.116998][ T796] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 238.126686][ T8687] x_tables: duplicate underflow at hook 1 [ 238.148812][ T797] usb usb5-port1: unable to enumerate USB device [ 238.230814][ C1] [ 238.233173][ C1] ================================ [ 238.238258][ C1] WARNING: inconsistent lock state [ 238.243347][ C1] syzkaller #0 Tainted: G L [ 238.249297][ C1] -------------------------------- [ 238.254377][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 238.261192][ C1] kworker/u8:2/35 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 238.267582][ C1] ffff8880583e0260 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 238.276885][ C1] {SOFTIRQ-ON-W} state was registered at: [ 238.282581][ C1] lock_acquire+0xf0/0x2e0 [ 238.287063][ C1] lock_sock_nested+0x48/0x100 [ 238.291903][ C1] tcp_sock_set_nodelay+0x2a/0x180 [ 238.297083][ C1] rds_tcp_listen_init+0x168/0x410 [ 238.302262][ C1] rds_tcp_init_net+0x154/0x380 [ 238.307172][ C1] ops_init+0x35c/0x5c0 [ 238.311398][ C1] register_pernet_operations+0x343/0x830 [ 238.317189][ C1] register_pernet_device+0x2a/0x80 [ 238.322456][ C1] rds_tcp_init+0xcf/0x170 [ 238.326936][ C1] do_one_initcall+0x250/0x8d0 [ 238.331777][ C1] do_initcall_level+0x104/0x190 [ 238.336776][ C1] do_initcalls+0x59/0xa0 [ 238.341167][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 238.346428][ C1] kernel_init+0x1d/0x1d0 [ 238.350819][ C1] ret_from_fork+0x51e/0xb90 [ 238.355467][ C1] ret_from_fork_asm+0x1a/0x30 [ 238.360295][ C1] irq event stamp: 723522 [ 238.364594][ C1] hardirqs last enabled at (723522): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 238.375064][ C1] hardirqs last disabled at (723521): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 238.385100][ C1] softirqs last enabled at (723468): [] __dev_queue_xmit+0x274/0x38a0 [ 238.394880][ C1] softirqs last disabled at (723469): [] do_softirq+0x76/0xd0 [ 238.403876][ C1] [ 238.403876][ C1] other info that might help us debug this: [ 238.411904][ C1] Possible unsafe locking scenario: [ 238.411904][ C1] [ 238.419327][ C1] CPU0 [ 238.422578][ C1] ---- [ 238.425827][ C1] lock(k-sk_lock-AF_INET6); [ 238.430483][ C1] [ 238.433910][ C1] lock(k-sk_lock-AF_INET6); [ 238.438738][ C1] [ 238.438738][ C1] *** DEADLOCK *** [ 238.438738][ C1] [ 238.446855][ C1] 12 locks held by kworker/u8:2/35: [ 238.452023][ C1] #0: ffff88807b5fd948 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 238.463647][ C1] #1: ffffc90000ab7c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 238.476396][ C1] #2: ffff8880583e0fa0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 238.486365][ C1] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x110/0x6c0 [ 238.495726][ C1] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x283/0x1980 [ 238.504664][ C1] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 238.513696][ C1] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3eb/0x1950 [ 238.523231][ C1] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xc50 [ 238.532857][ C1] #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 238.541530][ C1] #9: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 238.550381][ C1] #10: ffff8880583e01e0 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x2577/0x2f60 [ 238.560100][ C1] #11: ffff8880583e0408 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 238.570244][ C1] [ 238.570244][ C1] stack backtrace: [ 238.576112][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.576128][ C1] Tainted: [L]=SOFTLOCKUP [ 238.576132][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.576140][ C1] Workqueue: krds_cp_wq#3/0 rds_send_worker [ 238.576157][ C1] Call Trace: [ 238.576163][ C1] [ 238.576168][ C1] dump_stack_lvl+0xe8/0x150 [ 238.576183][ C1] print_usage_bug+0x28b/0x2e0 [ 238.576197][ C1] mark_lock_irq+0x410/0x420 [ 238.576212][ C1] mark_lock+0x115/0x190 [ 238.576224][ C1] __lock_acquire+0x689/0x2cf0 [ 238.576238][ C1] ? rcu_is_watching+0x15/0xb0 [ 238.576251][ C1] ? trace_contention_end+0x3b/0x170 [ 238.576260][ C1] ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0 [ 238.576283][ C1] lock_acquire+0xf0/0x2e0 [ 238.576295][ C1] ? inet6_getname+0x15d/0x650 [ 238.576305][ C1] ? check_path+0x21/0x40 [ 238.576318][ C1] ? check_noncircular+0xda/0x150 [ 238.576332][ C1] lock_sock_nested+0x48/0x100 [ 238.576344][ C1] ? inet6_getname+0x15d/0x650 [ 238.576358][ C1] inet6_getname+0x15d/0x650 [ 238.576369][ C1] rds_tcp_conn_slots_available+0x288/0x470 [ 238.576381][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 238.576395][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 238.576408][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 238.576419][ C1] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 238.576430][ C1] ? NF_HOOK+0x336/0x3c0 [ 238.576443][ C1] ? ip6_input+0x16a/0x270 [ 238.576456][ C1] ? ip_sabotage_in+0x1e1/0x270 [ 238.576467][ C1] ? rds_recv_hs_exthdrs+0xc1/0x7c0 [ 238.576478][ C1] ? __napi_poll+0xae/0x340 [ 238.576489][ C1] ? net_rx_action+0x627/0xf70 [ 238.576500][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 238.576511][ C1] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 238.576526][ C1] ? ip6_xmit+0x1149/0x1980 [ 238.576537][ C1] ? __tcp_transmit_skb+0x249b/0x43e0 [ 238.576551][ C1] ? __tcp_push_pending_frames+0x97/0x380 [ 238.576563][ C1] ? tcp_sock_set_cork+0x186/0x2e0 [ 238.576572][ C1] ? rds_send_xmit+0x207e/0x28d0 [ 238.576584][ C1] ? process_scheduled_works+0xb02/0x1830 [ 238.576596][ C1] ? worker_thread+0xa50/0xfc0 [ 238.576608][ C1] ? kthread+0x388/0x470 [ 238.576617][ C1] ? ret_from_fork+0x51e/0xb90 [ 238.576629][ C1] rds_recv_incoming+0x9f6/0x12d0 [ 238.576642][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 238.576654][ C1] ? skb_copy_bits+0x7e5/0x8f0 [ 238.576669][ C1] rds_tcp_data_recv+0x7f1/0xa40 [ 238.576680][ C1] ? stack_trace_save+0xa9/0x100 [ 238.576691][ C1] __tcp_read_sock+0x196/0x970 [ 238.576702][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 238.576713][ C1] rds_tcp_data_ready+0x369/0x9a0 [ 238.576724][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 238.576734][ C1] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 238.576747][ C1] tcp_data_queue+0x1e2e/0x5e50 [ 238.576766][ C1] ? tcp_urg+0x106/0x410 [ 238.576779][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 238.576793][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 238.576806][ C1] ? ktime_get+0x45/0x200 [ 238.576815][ C1] ? seqcount_lockdep_reader_access+0x40/0x100 [ 238.576825][ C1] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 238.576844][ C1] tcp_rcv_established+0xf45/0x2740 [ 238.576861][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 238.576880][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 238.576902][ C1] ? ip6_dst_check+0x5e3/0x7e0 [ 238.576920][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 238.576936][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 238.576953][ C1] tcp_v6_rcv+0x2653/0x2f60 [ 238.576967][ C1] ? nf_nat_inet_fn+0x95b/0xbf0 [ 238.576988][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 238.577000][ C1] ? nf_nat_ipv6_fn+0x229/0x2f0 [ 238.577015][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 238.577030][ C1] ? raw6_local_deliver+0x116/0x950 [ 238.577051][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 238.577064][ C1] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 238.577092][ C1] ip6_input_finish+0x191/0x370 [ 238.577114][ C1] NF_HOOK+0x336/0x3c0 [ 238.577134][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 238.577149][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 238.577169][ C1] ? NF_HOOK+0x9e/0x3c0 [ 238.577188][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 238.577208][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 238.577232][ C1] ip6_input+0x16a/0x270 [ 238.577251][ C1] ? ip6_input+0x23/0x270 [ 238.577270][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 238.577295][ C1] ip_sabotage_in+0x1e1/0x270 [ 238.577310][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 238.577324][ C1] nf_hook_slow+0xc5/0x220 [ 238.577347][ C1] NF_HOOK+0x21f/0x3c0 [ 238.577366][ C1] ? skb_orphan+0xaf/0xd0 [ 238.577386][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 238.577406][ C1] ? NF_HOOK+0x9e/0x3c0 [ 238.577424][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 238.577444][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 238.577466][ C1] ? netif_receive_skb+0x102/0xc50 [ 238.577480][ C1] netif_receive_skb+0x278/0xc50 [ 238.577497][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 238.577513][ C1] ? br_netif_receive_skb+0x126/0x190 [ 238.577530][ C1] NF_HOOK+0xa4/0x3a0 [ 238.577545][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 238.577561][ C1] ? NF_HOOK+0xfa/0x3a0 [ 238.577575][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 238.577591][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 238.577608][ C1] ? br_pass_frame_up+0x275/0x420 [ 238.577624][ C1] br_handle_frame_finish+0x14b2/0x1b40 [ 238.577640][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 238.577661][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 238.577678][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 238.577692][ C1] ? ip6t_do_table+0x173/0x1560 [ 238.577705][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 238.577717][ C1] ? nf_hook_slow+0x176/0x220 [ 238.577729][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 238.577740][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 238.577752][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 238.577762][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 238.577772][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 238.577784][ C1] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 238.577796][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 238.577809][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 238.577820][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 238.577831][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 238.577843][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 238.577854][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 238.577865][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 238.577875][ C1] br_handle_frame+0x1277/0x1510 [ 238.577886][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 238.577901][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 238.577912][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 238.577924][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 238.577934][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 238.577946][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 238.577959][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 238.577973][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 238.577986][ C1] ? stack_depot_save_flags+0x3f3/0x810 [ 238.577999][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 238.578012][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 238.578022][ C1] ? __tcp_transmit_skb+0x249b/0x43e0 [ 238.578035][ C1] ? tcp_write_xmit+0x16e8/0x6980 [ 238.578046][ C1] ? __tcp_push_pending_frames+0x97/0x380 [ 238.578058][ C1] ? tcp_sock_set_cork+0x186/0x2e0 [ 238.578068][ C1] ? rds_send_xmit+0x207e/0x28d0 [ 238.578079][ C1] ? rds_send_worker+0x7d/0x2e0 [ 238.578091][ C1] ? process_scheduled_works+0xb02/0x1830 [ 238.578103][ C1] ? worker_thread+0xa50/0xfc0 [ 238.578115][ C1] ? kthread+0x388/0x470 [ 238.578123][ C1] ? ret_from_fork+0x51e/0xb90 [ 238.578134][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 238.578150][ C1] ? lock_acquire+0xf0/0x2e0 [ 238.578162][ C1] ? process_backlog+0x3eb/0x1950 [ 238.578173][ C1] ? process_backlog+0x3eb/0x1950 [ 238.578185][ C1] ? process_backlog+0x3eb/0x1950 [ 238.578196][ C1] process_backlog+0x76d/0x1950 [ 238.578211][ C1] __napi_poll+0xae/0x340 [ 238.578222][ C1] ? skb_defer_free_flush+0x233/0x260 [ 238.578233][ C1] net_rx_action+0x627/0xf70 [ 238.578247][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 238.578261][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 238.578271][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 238.578287][ C1] handle_softirqs+0x22a/0x870 [ 238.578300][ C1] ? do_softirq+0x76/0xd0 [ 238.578313][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 238.578327][ C1] do_softirq+0x76/0xd0 [ 238.578339][ C1] [ 238.578342][ C1] [ 238.578346][ C1] __local_bh_enable_ip+0xf8/0x130 [ 238.578358][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 238.578372][ C1] __dev_queue_xmit+0x1e6c/0x38a0 [ 238.578389][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 238.578403][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 238.578416][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 238.578431][ C1] ? neigh_resolve_output+0x438/0x750 [ 238.578442][ C1] ? eth_header+0x11b/0x200 [ 238.578456][ C1] ? __asan_memcpy+0x40/0x70 [ 238.578472][ C1] ? eth_header+0x11b/0x200 [ 238.578484][ C1] ? __pfx_eth_header+0x10/0x10 [ 238.578497][ C1] ? neigh_resolve_output+0x624/0x750 [ 238.578510][ C1] ? ip6_output+0x126/0x550 [ 238.578521][ C1] ip6_output+0x340/0x550 [ 238.578536][ C1] ip6_xmit+0x1149/0x1980 [ 238.578549][ C1] ? ip6_xmit+0x283/0x1980 [ 238.578561][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 238.578575][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 238.578587][ C1] inet6_csk_xmit+0x3bd/0x6c0 [ 238.578597][ C1] ? inet6_csk_xmit+0x110/0x6c0 [ 238.578606][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 238.578614][ C1] __tcp_transmit_skb+0x249b/0x43e0 [ 238.578632][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 238.578647][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 238.578661][ C1] tcp_write_xmit+0x16e8/0x6980 [ 238.578680][ C1] __tcp_push_pending_frames+0x97/0x380 [ 238.578694][ C1] tcp_sock_set_cork+0x186/0x2e0 [ 238.578703][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 238.578715][ C1] rds_send_xmit+0x207e/0x28d0 [ 238.578733][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 238.578747][ C1] rds_send_worker+0x7d/0x2e0 [ 238.578760][ C1] ? process_scheduled_works+0xa25/0x1830 [ 238.578772][ C1] process_scheduled_works+0xb02/0x1830 [ 238.578788][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.578802][ C1] ? assign_work+0x3d5/0x5e0 [ 238.578814][ C1] worker_thread+0xa50/0xfc0 [ 238.578831][ C1] kthread+0x388/0x470 [ 238.578839][ C1] ? __pfx_worker_thread+0x10/0x10 [ 238.578851][ C1] ? __pfx_kthread+0x10/0x10 [ 238.578860][ C1] ret_from_fork+0x51e/0xb90 [ 238.578873][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 238.578884][ C1] ? __switch_to+0xc7d/0x1450 [ 238.578896][ C1] ? __pfx_kthread+0x10/0x10 [ 238.578905][ C1] ret_from_fork_asm+0x1a/0x30 [ 238.578922][ C1] [ 239.619025][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 239.627781][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 35, name: kworker/u8:2 [ 239.636784][ C1] preempt_count: 303, expected: 0 [ 239.641792][ C1] RCU nest depth: 7, expected: 0 [ 239.646706][ C1] INFO: lockdep is turned off. [ 239.651460][ C1] Preemption disabled at: [ 239.651466][ C1] [] __dev_queue_xmit+0x281/0x38a0 [ 239.662449][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.662466][ C1] Tainted: [L]=SOFTLOCKUP [ 239.662469][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.662477][ C1] Workqueue: krds_cp_wq#3/0 rds_send_worker [ 239.662495][ C1] Call Trace: [ 239.662502][ C1] [ 239.662507][ C1] dump_stack_lvl+0xe8/0x150 [ 239.662522][ C1] __might_resched+0x378/0x4d0 [ 239.662536][ C1] ? __dev_queue_xmit+0x281/0x38a0 [ 239.662552][ C1] lock_sock_nested+0x5d/0x100 [ 239.662563][ C1] inet6_getname+0x15d/0x650 [ 239.662575][ C1] rds_tcp_conn_slots_available+0x288/0x470 [ 239.662588][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 239.662602][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 239.662615][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 239.662626][ C1] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 239.662637][ C1] ? NF_HOOK+0x336/0x3c0 [ 239.662651][ C1] ? ip6_input+0x16a/0x270 [ 239.662664][ C1] ? ip_sabotage_in+0x1e1/0x270 [ 239.662675][ C1] ? rds_recv_hs_exthdrs+0xc1/0x7c0 [ 239.662686][ C1] ? __napi_poll+0xae/0x340 [ 239.662697][ C1] ? net_rx_action+0x627/0xf70 [ 239.662708][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 239.662719][ C1] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 239.662733][ C1] ? ip6_xmit+0x1149/0x1980 [ 239.662744][ C1] ? __tcp_transmit_skb+0x249b/0x43e0 [ 239.662758][ C1] ? __tcp_push_pending_frames+0x97/0x380 [ 239.662770][ C1] ? tcp_sock_set_cork+0x186/0x2e0 [ 239.662780][ C1] ? rds_send_xmit+0x207e/0x28d0 [ 239.662791][ C1] ? process_scheduled_works+0xb02/0x1830 [ 239.662803][ C1] ? worker_thread+0xa50/0xfc0 [ 239.662815][ C1] ? kthread+0x388/0x470 [ 239.662823][ C1] ? ret_from_fork+0x51e/0xb90 [ 239.662836][ C1] rds_recv_incoming+0x9f6/0x12d0 [ 239.662850][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 239.662861][ C1] ? skb_copy_bits+0x7e5/0x8f0 [ 239.662876][ C1] rds_tcp_data_recv+0x7f1/0xa40 [ 239.662887][ C1] ? stack_trace_save+0xa9/0x100 [ 239.662899][ C1] __tcp_read_sock+0x196/0x970 [ 239.662909][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 239.662920][ C1] rds_tcp_data_ready+0x369/0x9a0 [ 239.662931][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 239.662942][ C1] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 239.662955][ C1] tcp_data_queue+0x1e2e/0x5e50 [ 239.662973][ C1] ? tcp_urg+0x106/0x410 [ 239.662987][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 239.663001][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 239.663014][ C1] ? ktime_get+0x45/0x200 [ 239.663022][ C1] ? seqcount_lockdep_reader_access+0x40/0x100 [ 239.663032][ C1] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 239.663047][ C1] tcp_rcv_established+0xf45/0x2740 [ 239.663064][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 239.663079][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 239.663095][ C1] ? ip6_dst_check+0x5e3/0x7e0 [ 239.663106][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 239.663117][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 239.663129][ C1] tcp_v6_rcv+0x2653/0x2f60 [ 239.663139][ C1] ? nf_nat_inet_fn+0x95b/0xbf0 [ 239.663152][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 239.663161][ C1] ? nf_nat_ipv6_fn+0x229/0x2f0 [ 239.663171][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 239.663181][ C1] ? raw6_local_deliver+0x116/0x950 [ 239.663196][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 239.663205][ C1] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 239.663224][ C1] ip6_input_finish+0x191/0x370 [ 239.663239][ C1] NF_HOOK+0x336/0x3c0 [ 239.663252][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 239.663263][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 239.663277][ C1] ? NF_HOOK+0x9e/0x3c0 [ 239.663290][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 239.663304][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 239.663320][ C1] ip6_input+0x16a/0x270 [ 239.663333][ C1] ? ip6_input+0x23/0x270 [ 239.663347][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 239.663360][ C1] ip_sabotage_in+0x1e1/0x270 [ 239.663371][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 239.663381][ C1] nf_hook_slow+0xc5/0x220 [ 239.663394][ C1] NF_HOOK+0x21f/0x3c0 [ 239.663407][ C1] ? skb_orphan+0xaf/0xd0 [ 239.663421][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 239.663434][ C1] ? NF_HOOK+0x9e/0x3c0 [ 239.663447][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 239.663461][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 239.663475][ C1] ? netif_receive_skb+0x102/0xc50 [ 239.663485][ C1] netif_receive_skb+0x278/0xc50 [ 239.663496][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 239.663507][ C1] ? br_netif_receive_skb+0x126/0x190 [ 239.663519][ C1] NF_HOOK+0xa4/0x3a0 [ 239.663529][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 239.663540][ C1] ? NF_HOOK+0xfa/0x3a0 [ 239.663550][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 239.663560][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 239.663572][ C1] ? br_pass_frame_up+0x275/0x420 [ 239.663583][ C1] br_handle_frame_finish+0x14b2/0x1b40 [ 239.663594][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 239.663608][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 239.663620][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 239.663629][ C1] ? ip6t_do_table+0x173/0x1560 [ 239.663642][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 239.663654][ C1] ? nf_hook_slow+0x176/0x220 [ 239.663666][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 239.663676][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 239.663688][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 239.663698][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 239.663708][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 239.663725][ C1] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 239.663737][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 239.663750][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 239.663761][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 239.663772][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 239.663784][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 239.663795][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 239.663807][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 239.663816][ C1] br_handle_frame+0x1277/0x1510 [ 239.663827][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 239.663843][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 239.663853][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 239.663865][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 239.663880][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 239.663899][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 239.663912][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.663926][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 239.663939][ C1] ? stack_depot_save_flags+0x3f3/0x810 [ 239.663953][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 239.663966][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 239.663977][ C1] ? __tcp_transmit_skb+0x249b/0x43e0 [ 239.663990][ C1] ? tcp_write_xmit+0x16e8/0x6980 [ 239.664001][ C1] ? __tcp_push_pending_frames+0x97/0x380 [ 239.664013][ C1] ? tcp_sock_set_cork+0x186/0x2e0 [ 239.664022][ C1] ? rds_send_xmit+0x207e/0x28d0 [ 239.664033][ C1] ? rds_send_worker+0x7d/0x2e0 [ 239.664046][ C1] ? process_scheduled_works+0xb02/0x1830 [ 239.664058][ C1] ? worker_thread+0xa50/0xfc0 [ 239.664069][ C1] ? kthread+0x388/0x470 [ 239.664077][ C1] ? ret_from_fork+0x51e/0xb90 [ 239.664088][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 239.664108][ C1] ? lock_acquire+0xf0/0x2e0 [ 239.664121][ C1] ? process_backlog+0x3eb/0x1950 [ 239.664132][ C1] ? process_backlog+0x3eb/0x1950 [ 239.664143][ C1] ? process_backlog+0x3eb/0x1950 [ 239.664155][ C1] process_backlog+0x76d/0x1950 [ 239.664169][ C1] __napi_poll+0xae/0x340 [ 239.664180][ C1] ? skb_defer_free_flush+0x233/0x260 [ 239.664191][ C1] net_rx_action+0x627/0xf70 [ 239.664205][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 239.664218][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 239.664228][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 239.664239][ C1] handle_softirqs+0x22a/0x870 [ 239.664252][ C1] ? do_softirq+0x76/0xd0 [ 239.664265][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 239.664279][ C1] do_softirq+0x76/0xd0 [ 239.664291][ C1] [ 239.664294][ C1] [ 239.664298][ C1] __local_bh_enable_ip+0xf8/0x130 [ 239.664309][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 239.664324][ C1] __dev_queue_xmit+0x1e6c/0x38a0 [ 239.664341][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 239.664354][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 239.664367][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 239.664382][ C1] ? neigh_resolve_output+0x438/0x750 [ 239.664394][ C1] ? eth_header+0x11b/0x200 [ 239.664407][ C1] ? __asan_memcpy+0x40/0x70 [ 239.664422][ C1] ? eth_header+0x11b/0x200 [ 239.664435][ C1] ? __pfx_eth_header+0x10/0x10 [ 239.664447][ C1] ? neigh_resolve_output+0x624/0x750 [ 239.664460][ C1] ? ip6_output+0x126/0x550 [ 239.664471][ C1] ip6_output+0x340/0x550 [ 239.664483][ C1] ip6_xmit+0x1149/0x1980 [ 239.664497][ C1] ? ip6_xmit+0x283/0x1980 [ 239.664508][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 239.664522][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 239.664534][ C1] inet6_csk_xmit+0x3bd/0x6c0 [ 239.664543][ C1] ? inet6_csk_xmit+0x110/0x6c0 [ 239.664551][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 239.664560][ C1] __tcp_transmit_skb+0x249b/0x43e0 [ 239.664578][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 239.664593][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 239.664606][ C1] tcp_write_xmit+0x16e8/0x6980 [ 239.664626][ C1] __tcp_push_pending_frames+0x97/0x380 [ 239.664639][ C1] tcp_sock_set_cork+0x186/0x2e0 [ 239.664649][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 239.664661][ C1] rds_send_xmit+0x207e/0x28d0 [ 239.664679][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 239.664692][ C1] rds_send_worker+0x7d/0x2e0 [ 239.664705][ C1] ? process_scheduled_works+0xa25/0x1830 [ 239.664717][ C1] process_scheduled_works+0xb02/0x1830 [ 239.664734][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.664747][ C1] ? assign_work+0x3d5/0x5e0 [ 239.664759][ C1] worker_thread+0xa50/0xfc0 [ 239.664776][ C1] kthread+0x388/0x470 [ 239.664784][ C1] ? __pfx_worker_thread+0x10/0x10 [ 239.664796][ C1] ? __pfx_kthread+0x10/0x10 [ 239.664805][ C1] ret_from_fork+0x51e/0xb90 [ 239.664818][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 239.664829][ C1] ? __switch_to+0xc7d/0x1450 [ 239.664841][ C1] ? __pfx_kthread+0x10/0x10 [ 239.664850][ C1] ret_from_fork_asm+0x1a/0x30 [ 239.664866][ C1]