last executing test programs: 14.458504586s ago: executing program 0 (id=400): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) syz_usb_connect(0x5, 0x36, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000400)={r7, &(0x7f00000007c0)=[{0x80000000}], &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={r9, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f000000a300)={{r8, r11, 0x5, [0x80000001, 0x4]}, {r10, r12, 0x4, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r16 = socket(0x400000000010, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 9.907289444s ago: executing program 0 (id=412): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2311}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x388, 0x41d9fda7) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0) 9.040008211s ago: executing program 1 (id=414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0xf659, 0x34324d59, 0x1, @discrete={0x8, 0x83b6}}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000180)={0x10002, 0x0, &(0x7f000077b000/0x4000)=nil}) madvise(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x3) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000140), 0xc6b, 0x8000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9000) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f00005ba000/0x4000)=nil, &(0x7f0000494000/0x3000)=nil, 0x4000, 0x2}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3, 0x800004, 0xfffffff3, 0x7a2a}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000500)={0x1, 0x0, [{0x80000008, 0xef3, 0x2, 0x950, 0xc}]}) 8.561749461s ago: executing program 1 (id=416): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x41}, @TCA_CAKE_MPU={0x8, 0xe, 0x25}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 8.316148822s ago: executing program 4 (id=417): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x4, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6(0xa, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff00000001, 0x2102) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12102) ioctl$BLKBSZSET(r2, 0x40081271, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x7ff, 0x1, 0x2fa11, 0xffdfffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x1}) unshare(0x2a020600) r7 = timerfd_create(0x0, 0x80800) timerfd_settime(r7, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 7.917128492s ago: executing program 0 (id=418): r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x3, 0x408200) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESOCT=r1, @ANYBLOB="101000000030000008000d0005000000e4031680a4"], 0x40c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbc2, &(0x7f0000000600)={0x0, 0x1064, 0x80, 0x1, 0x166}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x5c, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0, 0x240010c4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0), 0x0, &(0x7f00000009c0)="3e12d23d346cfdeba739488a83b639c71716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2ca416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d0000", 0x8e, 0x0) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000200)='ceph\x00', &(0x7f0000000240)='#\x00') socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) sendmmsg(r1, &(0x7f0000000440), 0x0, 0x4844) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000580)={'\x00', 0x0, 0x6, 0x9, 0x5, 0x5, "08000965282dffff00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3500008000000200", "24f90000e612e80800", "cf7c11ded800"]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b7000000000000004e000000000000005fa00000000000008500004c675eee947f"], &(0x7f0000003ff6)='GPL\x00', 0x4018, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x1ff, 0x10, 0x204, 0xfffffffc, 0x7, 0x8, 0xa36, 0x4, 0x0}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000380)={r8, 0x0, &(0x7f0000000300)}, &(0x7f0000000400)=0x10) 7.56204044s ago: executing program 1 (id=421): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300e1c87a8041ade938f60ce5708f17ba9e3a087c92141336701c05d8d15c45795e7a52508d8bbd2147af49e05a4d06fa775cf409192df7b2e58e2266856360036751ad4497cbaffd779d6cda658d9073b6e38026daddef0caeace553e4966417d462ff56bdcfe9a8a77fa43b360f798e1fbe7eef834f8a5856116b78ca57fade8363ed3166f3f1a117fc1ca8e5eae2a3ea7230316ab7d8e0adbd34bb58fb983932e44ed972d807fca2301fc622c2101c079fc75408ed919d37ea", @ANYRES32=r1, @ANYBLOB="1c005e80080002000000000110000100ffffffefffffffff0d000000"], 0x38}}, 0x80002) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) (async) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}]) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (rerun: 64) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async, rerun: 64) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r5 = epoll_create1(0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffffbff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffe0}, {0x0, 0xfff1}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0x3, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004840}, 0x8040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x20, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x1, 0x2, 0x8, 0x2, 0x80, 0xffffffffffffffed}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xe5, 0x9, 0x2, 0x6b89, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xd7, &(0x7f0000000500)=""/215, 0x41000, 0x48, '\x00', r9, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x5, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r3, r6, r6, r3], &(0x7f0000000600), 0x10, 0x80010}, 0x94) (async) r10 = dup3(r6, r5, 0x0) io_uring_setup(0x10c2, &(0x7f0000000100)={0x0, 0xe786, 0x8000, 0x1, 0x201, 0x0, r10}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000fb09000000000000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101}, 0x94) 6.962717031s ago: executing program 0 (id=422): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) syz_usb_connect(0x5, 0x36, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000400)={r7, &(0x7f00000007c0)=[{0x80000000}], &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={r9, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f000000a300)={{r8, r11, 0x5, [0x80000001, 0x4]}, {r10, r12, 0x4, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r16 = socket(0x400000000010, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 6.710715931s ago: executing program 1 (id=423): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000200)={0x3, @output={0x0, 0x1, {0x0, 0x1096d71b}, 0x1002, 0x66}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f0000000080), 0x0, 0x2, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}, 0x906}, {0xa, 0x4e24, 0x2, @local, 0xffffff01}, 0x1, {[0x3, 0x200, 0x6, 0x400080, 0x8, 0xc000, 0x7, 0x8]}}, 0x5c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x1, 0x0, 0x9, 0xc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x2) fgetxattr(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="747275737465642e2f6465762f74747953330073be485f6f3ec55b42631f5ac2cc7ff9e5ec96700e166842676efa6dc36f4410f4850ef25f09010cbc53ca6cec31816d370aa4a516754abb2d33dd1a7d2aaba11e7e05fb2ef3bda8f889a6900b0ea9e389d34bbc93a407a6e2c12dde94aabfb44fab54e02fbe61c1122c"], 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 6.524100828s ago: executing program 4 (id=424): socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x2b, 0x3, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000280)=0xc41e, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@buf={0x1000, &(0x7f0000000b00)="d9e8c368a423c42361468c4c805ff3773860badf3d2e8427629b9e7fa488c86d5f9a405bed6ad9666194eff87aff3b0fe35bbb7ac09d0654ddef819fd3a2ff549d55b9e279cbb3468b4640fef3c3fabc98f34070238c37b259bc0c8ba6aee55bc25e273d21e964596b4b7aa6cf8361994b963774371c4d3e40321540152aa634d055fa546624c1ceb33b12ed308aac397b7feb20b57024e65a3e6ff0fa64e4795254a49e1eb5707644e385dd622ea436ed6472968548d88b20c4f4ff663984234715b2f52ff110c71c79ba985e6b7c3434389505bf37ac726ede82f96b8bf7cd374003443e88ce530b6dad6c280c0524c6afc3f4e1098441d2c4000c2a6c870efde9cdde573a3dcaa444d4c842bf8f5256662524858c3fbc01149cb7e222ea1082e550e5bcfeaf28c3fe505fee75ad343b64fa788c972c29d07cf9c1a1104e3844d274af37b4db38859fb1cd377fdf007a41e62f706dedc638b7239dace1bdc77875eb026c549e0f5facc8ed061963d4e1a56b48048d3c551238fdd03274247f1cb6d17b6134f0b8798d6f8326a53252fcbbf4a8f65c1fd09ebf12256726cbd65c4901b3a31d85983745d97e972e45069356df9ddf296365f5c6f2f39884f79d61bd3c74bad287ba72320d39601b42908713cea781f3d65153f4be3d27003758af2915d64e00520b1b1c9340a6f3c6aa480134ed4a9429133ecea062ef663bb70cfcc134d57af8e7dc668be431eba79012a2197ae41a089d0d39499061d81b5a0a4273056f1f6d0dc14a461a5769f29338a1ccade21ce26153043f07309eaad599dc1abf31a67eb11e41600b2257ac5f580e2390ebe91243db1af92d71b21cb8e83da98b5235914e0dc404a4fc9f58f52832542830f17c00abfd2b6d75cf87c26f210158b3def39ee9023078d06d8308dbd83191186789cda8fa2c432526facfa8b69d6e74aaa3aa17debe05e862e264ca9cb9253fdbd0de5544d17f2d7c890865bb9401874382cfb1706cc176f91e4333993173900811c7ed88732263074f13e5816734cb42c1898d65e1eec8d43ab3d79b4acb4672e6ad4a8b0d8ea58a6d19feec9f52a3bb0a6df7c3ac0291949d281b7e92477cae0518acd065f11eb50feea5c498496bf4e22516c7d1a8fbdd0c50929f47333c1c91dbeb4444b2a54f372ad43be60b36b06feecf0070681335c370845cd1fcc8b5e751761f4e8b77a966a94825ec7bcb28b3b687b0e33cec0005731e0d612f1892f19263a97be6c6e7b0dbda78171126df1a40fffb5d1ae22303c327699a8defe007c41be2c3d2881ea5c8da4f876946f49f0f6d5ac764c2042674118ee50edb6270db613a7c6ae7a6295bdab59e267addeb2f8a1e31d89990516aaed004998ec4999407ae409f369b793afa041492a881c08a555c0b99c895594cceda2a5d91ea1360499f8b481593aa96fcd94eeee9cc0b1ef3230aa4bceb910170de8a7e7c06200034e9b744868931fee658f34c190368784bb90ac60c60459601746b1a3c42463519d405f9a83336bc7aa77596338e28adf87f85eaa56bf9802b082930a05fc4aebc6f6360cf4eeccf6c4691a676c19dc3b801037f771e39784c629fd196d3c5c0f0d1404414085a0fb59212d14e859fb3ddaac3d24fb97ae87da725fa2d09416d443e038eb88df89c9f4228cb346e9226067beee52a347dfed6fedf725358377a2967873917dfbc0eb2ba1a38436db17d9f65de780a409b528d2fdecf17f6de962db68ba7a72053c18caf29b777826282963827110cbaa354122c962cfa314f688582a030bfc26501026b489e0734942a3f07a574aaf8f87533b6fe8dc9b9ab6062c4a3372145f4f6bd04df12c2fed5d170a0aa2d3ea5cc659717cb83542acb5600bedc6ecd5b732b1769a8375cfeccd39bfbc3cdcde3e70d58c473bc091a3c7239050d2a741384f76cca5bccecaacdbb726872f5f46c77084eff8d0d547cd949941ef22235860ddf3de5ab0bc678f8dc88c2793c212158ecaffdc54feedf618af7215c682187e34f2363b35bab9df7116eb5a716c37bfd7df9703ef1811bc008455406658e90dec623c379aa9a070fbf2b0ca373391c52db1c14ea32ca340014261b4ca55fba1b76caa54005ae3137dd928bd06ecaaae37a2a263c18987f477d655a0aaf2fb2827ea39995dc219940bcc24de76235e6377690e87a2401780ff665bb728c1ad453d22bd2dd786bb5e9367e939c3dc873b0a3c7c19d6ed65b93dd80b13fe1c9b7dfc769acaa730515b520b30b58a40326a8410541c73922705e15732643d961787ae4e7a6b25c8814382f9643aac9160515f5d5f748d7d20cab01a529adf87e256a5d60414ba711bdf425029fe4ff837a1c0f53a9ffe74d0cae12b18dbb227057ded3942493f9dd168d590a7c0b02d41b070e584c9353bb704bb480d2167665b04b6ac38a17b5b21edf780949d47e84c8092b29c394107d5fc8ff916b50b87c932c086e2ee538b869e7ddbfeaee9b5edaa3981df0a06d0ff09f7b1b951988fbc24683bc53f270862aa54df8533f35e4adb0597c820be935591469244986fe41f2f5e931aa20bd91b2f6af5c44347dccb626e1010aa1f46f494b16ec093b435d1b343d52f07914f139dd2915a7c24c9b6c0bf2f300d9a5a4547e3aa2533c18676928aaad4de0cf6eb79a9e1d189beed259edad9be5347c1634749bf43a7bcc0f0bfcd2f9b5090bd6a8de1ba25057eb9d4b8a02752bc5a0d2dc14f4e4de0db15af7a53378fce05ce619df490d755a88065865369707e19c131a89c65f17a78015591274d8b4197ffd892bbe1df2c70ae2ddb9996951986c318c677497fb6c090492a84611d4cf5a88763c50c10ba871dad480db05347dd4171af4dffe1b5210234229c6fbd04c4b0b07010e31c3acdd04f93f3ff4fb45748c4732eba1ffb9cec6c374d41cf62da6f044183f75c7bdbf1b93ce11fd1bddebf291c71dcba8e99437e82cf186410f5026a626dea1bc7805ed41965f638f09119438b642842057f1fe1debaf8c89ddfa3ee511408889b572fe9ee0b8932871e1477eae005a90a4b5c3252b1980785e9f31ff6af22f90774440c0aec3939723e06669855fcce23120a37d12f4ae209fcab687fdc7003c8311d80239aa753f3603cc442f5270504ebb01803c4cdc4a636ab04b4a200a0ae1be862b4ee86b218cec8ca98ad1e7caeb46304d3b1adbb5f8a92a26b26a137bfaef8321a1fcef11bc1c663688eddd7d2e18c9b8a81400992d5beba474fe5c0a1d262b2b5081138f2407bb56bb82e1483a118e4f6303ca0bb0f7926cbf3c35767e3d97cfef9d97b006ab06b844aaabc6803953479c3c40e3539655da6f8607b944486eda804ae126af1f40c6224273bb4574c734c453b35600903c3985af95c3553c9fae76673298721353534f358a0e88f764f4871263b4e502943d2e0a448e0d706ce9072c23216dcee97d1556fc6ad4d56075fd00b40cac151943939b078e2ecc8daf6f06f588c5441f34c2a01a3c54eb7a00ade7f8560ea5ba67e34c6b0b3f2014ef2ed73211c77a9e25e73e5a85d6f1c983fd479d752c62946bc42d213eb68991bb50b046a056ca863e1b9648212d55e629541af9d06da23646809662370534702fef401ce1354076746bd416048b337f3e9f29352c0f2290e714d875a8531def47e9cc546278e284fae15638a17f82d03f160072660b8f22420906b553375a0ed423a170beb76bb049b96da159ca678b98a17c1b2d72ba2641d454061f98496d0774b84ef8ca8dd76f2527af4e921cff1483935e5f3e63586c93c4fd48cea38b3205852d419fd7945b5af9b22e22455998db8d6e33719374105bb712756fc216f7d46190bd1e404dcf8617bb5e802dea785efc90d382042930754a2acfae53895bb9410f6938562368673ddc0fc102463f08ae5091b0f979081816ced2ca16b1784691dec15593cb1acb9010525e5a07a4b0ffd1e56b0c5284051bd3cc3206581fd4ca5a2fd33ae76599f1e7b0f307b4ad7bcc8a804be68cc09575def8c2115fcd270a4bc1189ccb1bb8fca360ee836a2a61c4814d0ca2093664f5d2339002a3713b05112e8372c6ab2fe683e36c0113b6e8233b9d1aa21025481578bf7ff692db19b50c3f352e11e1c3b59c40312799d00a3fc4fff05df997ab5a9d2d8c29ebeeb11a44650b441b9c163e8b7d8221eb276f456881d7f4b103e261b3f7779120dae3bcb41e52b2599653cf7357e937f6db4a88b7904d5a79d27f1cdb119b20dc61e0909402e6d6577865ff58b2c61347116d1df5f46ccc945173accbe9802eec4d6c2bd0bd5f9a778e5f1480a3a72a8cae79fa9d8ad66ed65eb5d21f3e1fec0977aaa68796298a4015241f5827b7ad070606cc2169d58ea2cab105fc26d107f6e285aedd52faea0c73fef0fbb5e98c945c15c5807724ad078f49da3a5aea803fbbdaa865d71893e025cdad160089772cf88c35d67fd0b9b94641911e8917dd3003f6050570de90177bf95f1a03f3ff3432054fe21b61c51626ba385eef5d206e839d5fa23ce27558dbeee3fb1cb05c6802ef24814ff42d8625a2cc92c3d890f50ec9df041fed883e6b7184bb7d5f0229c156ffea27d978f32eeb59ee0ba1563e6b949981821d24c99ffa2e6b6d2d9a345ff53ef0d2663e42eb3d6248265551464c969b5e94cc0128ee4a25daee2edac6c8dbdb5f4251d4aad346718aef65be21600f09b8bbca243e5d767131a06c0a6468733a79099b53bab55f4eef077b4109c047153659bff8f60a078e15be291847fe91d5408e4b73f22489cdc2c5cc9a04dbedf386d50aefc8d220592d99b4f124f0baac8dd0e46a17e640a07a4906e29600c3e664a9bab71f533728421190cc8aaccf818550576a50adf0d757dc1552cc5b3d5011fab82ce1ce225e994d73c84bd0471facaedfebabbdd1c0178b1f54cea408005205c2bbd8b50b25b0ffc4ec47de31047d1ec2fead8781ea433b73f1de4377633e1f55ea5ab7e4879a20333a2749aa589972e017bc75f9985cf7971889e67a39a4fb1781da5929c8e0ca484079b592ff1d36897e040a50fe1d51804eb4aa8490f9b1f4ab6afea2b9c973275c9a6ce9c799051644f7be795182ccc0486c44f8073d60e0f2cc1fb5b800b61ac25376de3c0aa325534969b6d37895ec1666b32a61939f28c30251390a706aef58487dd68b7e5d44e14e7da540984d85be69cf964142b75a247f3b0699c832f60de89dcde45039385d82d158344e141986ae105bacd47f3b64de4e9deb8c4069aaafe120bdc835a8bfbc2aa85db983cdb3832679adf6c441c010796be7c0a0034b4d5bd9de8023be7b0119472aaec7dcf5ef3ee337755baeda79a7e69bee373aa824e393597fa0e56b1115ef4376f741a2bdc4a84c957be738f2aa59f4b50c54ff1b780afb8999299da77d26bc8cb95b3e4f4295971f0abec8e9768e0b7c7c53a9100ba96fb7d22ae8d9565891c56bca65c72e056a49b62adfe3f1ece4bfaf66f5a86183e9daa39e23de0a82fddf5608610fe9123cd1d7a44e42948f90c2a66fb3de418f89a4e473d39648c3c3fad62911b858868e474881833fc4efd6e00457ea26dc0a0f4bdd0b15dadf8af5a04373ffce30b3033d10322e67895f6df3782c608440e59b3b20f22d88681c5fb158da6d869cd5a793d3257092dc84d6f76e75f2a33dd2067ddb2e58a65119e531c782994c10423e883adadece38418a3b3e9367a1bec06888cdc6fe876a7f3d78038a07036134a45437ccc73a34748991eac08c7305e354"}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000810500000000dfffffffffffffff", @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b"], 0x70}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) close(0x3) r5 = syz_io_uring_setup(0x494, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, 0x0, 0x1) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000) r9 = socket$inet6_sctp(0xa, 0xa1cedc1bba08ed80, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x68, "58213ad7239683615a641de245ef1aa0e4767fc5911f1b164bf70ac9d57974d054f77351a0843a596f40feb704660c40c4b1dc2ab2fe8e83188edfdab537c96f9774f5555202479a579f70b4c2829ba49decad3f1cdcb308b822dfc400884d9beceaf5532303bbcc"}, &(0x7f0000000100)=0x70) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r8, 0x7a9, &(0x7f0000000380)={{@any, 0xffffffff}, 0x100000002, 0x8, 0x1ff, 0x0, 0x6, 0x10004, 0x8, 0xc}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x1e0f, &(0x7f0000000200)={0x0, 0x64ad, 0x8000, 0x2, 0x2cf}, &(0x7f0000000180)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r10, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1, {0x1}}) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 5.662346815s ago: executing program 1 (id=426): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x1f89, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x100, 0x2}, &(0x7f0000000100), &(0x7f0000000280)) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) io_uring_enter(r1, 0x15f1, 0x27e9, 0x4b, 0x0, 0x0) 4.597785737s ago: executing program 2 (id=428): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) timer_create(0x3, &(0x7f0000000100)={0x0, 0x13, 0x0, @thr={&(0x7f0000000180)="c27d56167d4946faf6b2822b2dcec209b98e7ca7045f1e13dcc809be9f21955756af0b122d1b409ffbc39956273385469be8c62f5d69ac5017446a39039d3cd8bdd5752ae705ab95eccf47fe0f7d5b4e759962193ed01290f86e87234eaf3fbe8c3583d93978bbca8f5a22f95cc5788b6b7fede8249a1767f904ba2024424525f82944df6d64c31a8bfb4f0c55", &(0x7f0000000080)="c4384fa697deb61b852c80ccd9a223a075ad2886fb729a650ec57096504e2f7b665f5840"}}, &(0x7f0000000240)) fcntl$setstatus(r1, 0x4, 0x102800) futex(0xfffffffffffffffc, 0x3, 0xfffffffe, 0x0, 0x0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.416772597s ago: executing program 2 (id=429): syz_emit_ethernet(0xd7, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa22001180fe05f94ca6b52258e6e11218a5c8f88bd5cfa48c5e46e5e272ffe4726e0e6adac155348c4b3a334b60599db90d1f8bcdc7b8de3951f710994b7127e3ca139f9cf87a4331523ec901715108c16c3c8e1a97cf9b194fc542baf4317354a06fc2e6b76b95d317a6afb42bb36cfe485c96baf1168419d76d7c6316517523903ea5212b8683970bb952c2491f3114cb05d06d634425eadf8b6d8992805c08bec283d6f74051330e57393d283180af793524ad2ef9708b640cda299195e351dd8383cc99e98b723f61e5bd"], 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @local}, 0xc) (async) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r4, &(0x7f0000000140), 0x0, 0x1, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x19, 0x8001, 0x1, 0x9, 0x4, 0x67, 0x8001, 0xfffffffc}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x7, 0xb) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000925f4ea0200000000ffffffffac"], 0x0) (rerun: 32) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 4.302258614s ago: executing program 4 (id=430): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x4ec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) futex(0x0, 0x3, 0x1, 0x0, 0x0, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d6f61657020686173683d626c616b6532732d3232342d67656e657269630000bfcb000000000400"/78], 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x5090c0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd8600d9e6716ffb16eb72bb4411b7c9fddbdf2520000000", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) syz_emit_ethernet(0x6f, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x39, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}], "1e"}}}}}}}, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r9, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x4, 0x78, 0x7, 0x9}, [{0x70000000, 0xfffffff7, 0x2, 0x9, 0x41000101, 0x1, 0x9, 0xa}, {0x6474e551, 0x2, 0x2007, 0x5, 0x7fff, 0x7980, 0x0, 0x3}, {0x6474e551, 0x2, 0xc, 0x43fb, 0xfff, 0xe94, 0x9, 0x7ff}, {0x6474e551, 0x10001, 0xc4e7, 0x10001, 0xa, 0x1cd2f15f, 0xfffffffffffffff9, 0x1}]}, 0x120) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r9) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.202571901s ago: executing program 2 (id=431): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.417055393s ago: executing program 4 (id=432): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$dsp(r1, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000000)={0x0, 0x1fffffe, 0x800007, 0x100080000000006, 0x346a, 0x100000001, 0xfffdfffffffffffe, 0x4, 0x4, 0x2, 0xfffffffd, 0x1}) close(r1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f00000005c0)) 3.208085271s ago: executing program 2 (id=433): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="203111000000084677"], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.974397883s ago: executing program 0 (id=434): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x4048844) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil) unshare(0x400) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xd, &(0x7f0000000000), 0x8) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c::=\x00', 0x0) r7 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x2e0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) 2.941081061s ago: executing program 3 (id=435): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x20000000005, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x5, {0x40, 0x8000000003, 0x5, 0xffff, 0x4000001000, 0xfffffffffffffffc, 0x0, 0x0, 0x6bda, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) socket$kcm(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f0000000240)) 2.782925554s ago: executing program 3 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x84, 0x0, 0x24000840}, 0x40) 2.693841399s ago: executing program 4 (id=437): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x0, 0x180000, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000300)={0x2, 0x0, {&(0x7f00000002c0)=""/3, 0x3, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000001080)=""/185, 0xb9, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000840)={0x2, 0x0, {&(0x7f00000008c0)=""/233, 0xe9, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f00000005c0)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000021c0)="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", 0x1000) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 2.685170728s ago: executing program 3 (id=438): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(0xffffffffffffffff, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x0, 0x26, "1bfec09d37f7db518b61087250807276d249f23c4b222bd478429e7f83c595ed57e7b4c134aa"}, 0x2e) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x6, 0x6}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003fc0), 0x0, 0x4000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000100)=0x4, 0x4) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYBLOB, @ANYRES32=r9], 0x54}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000007080)=@dellink={0x124, 0x11, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x24204}, [@IFLA_IFALIASn={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x3}, @IFLA_AF_SPEC={0x48, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1f}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0xd1c, 0x0, 0x0, 0x7}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "77fd1a93b5e7799b0419f2b27682d0c2ccbc"}, @IFLA_AF_SPEC={0x94, 0x1a, 0x0, 0x1, [@AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x4, 0x0, 0x0, 0x6}, {0x8, 0x5, 0x0, 0x0, 0x8f8}, {0x8, 0x21, 0x0, 0x0, 0xffffffff}, {0x8, 0x1d, 0x0, 0x0, 0x80000001}, {0x8, 0x1c, 0x0, 0x0, 0x80000000}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x1}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x16, 0x0, 0x0, 0x4}, {0x8, 0x13, 0x0, 0x0, 0x300000}, {0x8, 0xd, 0x0, 0x0, 0x2}, {0x8, 0x11, 0x0, 0x0, 0x6}, {0x8, 0x0, 0x0, 0x0, 0x9}, {0x8, 0x16, 0x0, 0x0, 0x8}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_IFALIASn={0x4}]}, 0x124}}, 0x0) 2.298319231s ago: executing program 2 (id=439): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x4, 0xe, 0x24, 0x2}, {0x6, 0x0, 0xfff3, 0x8, 0xfb, 0xbc}, 0x0, 0x7, 0x6a1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x7, 0x8, 0x2, 0x9, 0x9, 0x7, 0x80000, 0x6, 0x3880, 0x2, 0x401, 0x9, 0x3, 0x5, 0x1, 0x10001, 0x6, 0x8f, 0xb81, 0x2, 0x200, 0xfffffffe, 0x1000, 0x14, 0x100, 0x1, 0x9, 0x2, 0x0, 0xfffffffd, 0x1b34963d, 0xff, 0xadb, 0x2ccd, 0x2, 0x4, 0x7, 0x0, 0x1, 0xffffffff, 0x9c, 0x7, 0x1, 0x1, 0x8, 0x4, 0x200, 0x8dbe, 0x2eccd818, 0x0, 0x6, 0xdd, 0x9, 0x32, 0x4, 0x2, 0x8, 0x8, 0x1000, 0x80, 0x7f, 0x3, 0x5, 0x9, 0x7, 0x4, 0x8, 0x4, 0x6, 0x2, 0x5, 0x7, 0x6, 0x1, 0x6, 0x200, 0x6, 0x80, 0x5, 0x0, 0x77, 0x1, 0x8, 0xd, 0x40, 0x8, 0x80000001, 0x8, 0x7fffffff, 0x4, 0xf, 0x0, 0x4, 0x4c, 0xfffff801, 0x4, 0x7beb, 0xfffffffa, 0x2, 0x10, 0x2, 0x6, 0x3, 0x6, 0x1, 0x6, 0xa, 0x8, 0x2, 0x7fffffff, 0x2, 0x8, 0x2, 0x8000, 0x5, 0x5, 0x80000000, 0x3, 0x628, 0x6, 0x7, 0xc, 0x0, 0x3, 0x8001, 0x7, 0xa, 0xff, 0x2, 0x9, 0x9, 0x10000, 0x0, 0x6, 0x3, 0xe, 0xd, 0x101, 0x7fff, 0x9, 0x7d691fa0, 0x3, 0xb, 0x8, 0x8, 0x6, 0x7, 0xe0d, 0xa, 0x16, 0x6, 0x0, 0x5, 0xfff, 0x4, 0x800, 0x9, 0xd8, 0x101, 0x9, 0x5, 0x100, 0x9, 0x8, 0x4, 0x9, 0x2, 0xc, 0x0, 0x8, 0x8, 0x9, 0x5, 0x6, 0xffffff00, 0xa188, 0xd, 0x7f, 0xaca1, 0x80000000, 0x3, 0x0, 0x3, 0x7, 0x7ff, 0x0, 0x6, 0x800, 0x100, 0x0, 0x7, 0x17, 0x407, 0x3, 0x40, 0xc, 0x4, 0xfffffff7, 0x7fff, 0x1, 0x2, 0x5c, 0xfffffff9, 0x72, 0x0, 0x9, 0x6e, 0x1, 0x4, 0x296c699, 0x6, 0x7fffffff, 0x5, 0x3, 0x43c5, 0x1, 0x9, 0x2, 0x7, 0x2, 0x5, 0x1000000, 0x4cee, 0x12ce, 0x4, 0x6, 0x3, 0x4, 0x7ff, 0x800, 0x1, 0xffffffff, 0x80000001, 0x2000, 0x80, 0x766b, 0x0, 0x6, 0x0, 0x6, 0x0, 0x5f8, 0x5, 0xee30, 0x22, 0xffffffff, 0x4, 0x34, 0x3, 0x7, 0x23adb4be, 0x9, 0x6, 0x2]}]}}]}, 0x45c}}, 0x4000010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533002000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c"], 0x158}}, 0x0) 2.286463357s ago: executing program 1 (id=440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020601080000000000000000010000030c000300686173683a6970000500010007000000050005000a0000000900020073797a300000000005000400000000bf0d00078008000840000000d308000640000000005fa51f"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 1.804978718s ago: executing program 2 (id=441): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) read(r0, &(0x7f0000000400)=""/169, 0xa9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f8000000160001000000000000000000e00000020000000000000000000000007f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ac1e01010000000000000000000000000000000000000000200000000000feff0000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ffffffff"], 0xf8}}, 0x20000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x20, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x9ac4}}, './file0\x00'}) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x69) close(r6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x5}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000600)) sendto$rxrpc(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f00000004c0)={0xc9, 0x0, 0xc}) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102"], 0x0) 1.78419472s ago: executing program 3 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x4000020001}]}) 1.099393189s ago: executing program 3 (id=443): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 824.21141ms ago: executing program 0 (id=444): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) syz_usb_connect(0x5, 0x36, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000400)={r7, &(0x7f00000007c0)=[{0x80000000}], &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={r9, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f000000a300)={{r8, r11, 0x5, [0x80000001, 0x4]}, {r10, r12, 0x4, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r16 = socket(0x400000000010, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 438.913741ms ago: executing program 4 (id=445): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) r5 = syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb829785b7fc", 0xa1, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000011c0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_generic(r3, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000015c0)={0x125c, 0x1e, 0x400, 0x70bd28, 0x25dfdbfb, {0xf}, [@nested={0x4, 0x12e}, @generic="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", @generic="1d550bdaa8e72eafe6291b2dfebc83fb57c251bad314a9cf570642f5382c5bf8e650ebb75255f73bb31ea81f17008ed6e8e3a3f2737c5de492ed49a2ccf6a6f4193d790bd6f67610eeccf1a7e40b3872107fca40bbea1e0021f20c83d48bd444f160e57534c19b4fa2a667ea9889bd88ab125a45e9e36894c353c49d267a1e76420625d2361ffe", @nested={0xbf, 0x3b, 0x0, 0x1, [@typed={0x6, 0x9a, 0x0, 0x0, @str=')\x00'}, @typed={0x8, 0x1d, 0x0, 0x0, @pid=r5}, @generic="f40b72021ed77df534e8dff6feac10c4957969f86be3a92cafdfa6250f100e94888aa9651d46ec604b426be3fd9fb64253280b63d35f97769355debd718bf5d2a9757c997459baa7b53a209b7358dd140715f5a3c4f977383eb33c6c66b1d6f36217978c5a1fe4aa3efde30f06034aeed1f2781c442f57c7bceae30a164813a627f7ea2443234e75e326b264aa763fe0b85c578d6b1243268b9334ff41fc14eeed61d621ffc5f002e5e132"]}, @nested={0x81, 0x6e, 0x0, 0x1, [@generic="d07dd1d7c6c789ab39d31da1dd0586b2c3fc7617425394fc658a3b91d0fcbe262adb3a8cee6ac47c12d0f995a05e82bcdc1b2d4ba150c6dadeedbfb63a7a050f9935e5563285451eacec7ed39a84a5298e70f37285255ebdba3b140b589bec086db6e691e4", @nested={0x4, 0xc4}, @nested={0x4, 0x14a}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x2}, @generic, @typed={0x8, 0x10e, 0x0, 0x0, @uid=r6}]}, @typed={0x14, 0x117, 0x0, 0x0, @ipv6=@loopback}, @nested={0x8, 0xb2, 0x0, 0x1, [@nested={0x4, 0x32}]}, @generic="d6955d5c331c9c131a3337f8ac0ab66ad8fc00e3dfbf30", @generic="ff493c5d30bc24ecaaf606d8801139ea44c6ce412d4c3705f4902b39361df57a5b79299b835b0225d923737b9a7b71535cc50c93e44a44a00bb49da1a5cb8cd01930faff"]}, 0x125c}, 0x1, 0x0, 0x0, 0x4810}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 0s ago: executing program 3 (id=446): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000002b80)={0x1, [{0x1, 0x30b8, 0x27c, &(0x7f00000006c0)="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"}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x1, 0x0, 0x62e0, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xd42, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x64, 0x0}, {0x1, 0x0, 0x10000, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x62a, 0x0}, {0x1, 0x0, 0x404, 0x0}, {0x3, 0x0, 0x4, 0x0}]}) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7800, 0x40, 0x400, 0x2e, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @empty, @loopback}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r9, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r9, &(0x7f00000003c0)=@other={'unlock', ' ', 'mem'}, 0xb) (async) write$vga_arbiter(r9, &(0x7f00000003c0)=@other={'unlock', ' ', 'mem'}, 0xb) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010428bd70000300000000000000", @ANYRES32, @ANYBLOB="00000000051c0000340012800e00010069703665727370616e0000002000028004001200050016000100000008000100", @ANYRES32, @ANYBLOB="08001500770300d9"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010428bd70000300000000000000", @ANYRES32, @ANYBLOB="00000000051c0000340012800e00010069703665727370616e0000002000028004001200050016000100000008000100", @ANYRES32, @ANYBLOB="08001500770300d9"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) kernel console output (not intermixed with test programs): ubmit usb control message: -71 [ 137.137565][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 137.161463][ T24] ath6kl: Unable to send get target info: -71 [ 137.195979][ T24] ath6kl: Failed to init ath6kl core: -71 [ 137.228147][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 137.292588][ T24] usb 5-1: USB disconnect, device number 6 [ 141.234430][ T796] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.490969][ T796] usb 1-1: config 0 has no interfaces? [ 141.512210][ T796] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 141.540623][ T796] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 141.563013][ T796] usb 1-1: Manufacturer: syz [ 141.683388][ T796] usb 1-1: config 0 descriptor?? [ 141.888409][ T6472] loop2: detected capacity change from 0 to 7 [ 141.903715][ T6472] loop2: [ 141.914671][ T6472] loop2: partition table partially beyond EOD, truncated [ 143.311205][ T6483] batadv_slave_1: entered promiscuous mode [ 143.659010][ T6479] batadv_slave_1: left promiscuous mode [ 144.291650][ T5915] usb 1-1: USB disconnect, device number 5 [ 144.910815][ T6499] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 145.204441][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 145.320956][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 145.391016][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 145.418658][ T5915] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.786210][ T6512] netlink: 108 bytes leftover after parsing attributes in process `syz.3.141'. [ 145.840384][ T5915] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 145.872052][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.884880][ T5915] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 145.919811][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.952221][ T5915] usb 3-1: config 0 descriptor?? [ 146.379669][ T5915] corsair-cpro 0003:1B1C:0C10.0004: item fetching failed at offset 2/5 [ 146.450874][ T5915] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -22 [ 147.727252][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.754878][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.903937][ T5916] usb 3-1: USB disconnect, device number 8 [ 147.954371][ T796] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 148.157992][ T796] usb 5-1: config 0 has an invalid interface number: 212 but max is 0 [ 148.204441][ T796] usb 5-1: config 0 has no interface number 0 [ 148.237890][ T796] usb 5-1: config 0 interface 212 has no altsetting 0 [ 148.261873][ T796] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 148.307349][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.347881][ T796] usb 5-1: Product: syz [ 148.357410][ T796] usb 5-1: Manufacturer: syz [ 148.371086][ T796] usb 5-1: SerialNumber: syz [ 148.403887][ T796] usb 5-1: config 0 descriptor?? [ 148.511445][ T796] HFC-S_USB 5-1:0.212: probe with driver HFC-S_USB failed with error -5 [ 148.676236][ T5915] usb 5-1: USB disconnect, device number 7 [ 148.765007][ T796] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.774363][ T5916] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.934458][ T796] usb 1-1: device descriptor read/64, error -71 [ 148.974486][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 149.026883][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.056819][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.079962][ T5916] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 149.100106][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.123037][ T5916] usb 3-1: config 0 descriptor?? [ 149.204822][ T6544] batadv_slave_1: entered promiscuous mode [ 149.224605][ T796] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.257504][ T6542] batadv_slave_1: left promiscuous mode [ 149.377201][ T796] usb 1-1: device descriptor read/64, error -71 [ 149.492731][ T6546] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 149.518626][ T796] usb usb1-port1: attempt power cycle [ 149.654052][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.152'. [ 149.692806][ T6535] libceph: resolve 'c' (ret=-3): failed [ 149.897686][ T6553] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 149.935224][ T796] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.108384][ T796] usb 1-1: device descriptor read/8, error -71 [ 150.375244][ T796] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.473890][ T796] usb 1-1: device descriptor read/8, error -71 [ 150.646477][ T796] usb usb1-port1: unable to enumerate USB device [ 151.424362][ T5916] usbhid 3-1:0.0: can't add hid device: -71 [ 151.430464][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 151.441031][ T5916] usb 3-1: USB disconnect, device number 9 [ 152.304817][ T796] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 152.334393][ T5901] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.464441][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 152.473218][ T796] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 152.491079][ T796] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 152.507055][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 152.516421][ T796] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.531851][ T5901] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 152.545680][ T5901] usb 4-1: config 0 has no interface number 0 [ 152.553877][ T796] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 152.574877][ T5901] usb 4-1: New USB device found, idVendor=093a, idProduct=2460, bcdDevice=2a.87 [ 152.584602][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.601942][ T796] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 152.611986][ T5901] usb 4-1: Product: syz [ 152.617774][ T5901] usb 4-1: Manufacturer: syz [ 152.622672][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.636599][ T5901] usb 4-1: SerialNumber: syz [ 152.647954][ T796] usb 3-1: Product: syz [ 152.653297][ T5901] usb 4-1: config 0 descriptor?? [ 152.661657][ T796] usb 3-1: Manufacturer: syz [ 152.674135][ T796] usb 3-1: SerialNumber: syz [ 152.679384][ T6582] batadv_slave_1: entered promiscuous mode [ 152.692957][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 152.721681][ T796] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input8 [ 152.765521][ T6580] batadv_slave_1: left promiscuous mode [ 152.890324][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.904134][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.918715][ T5901] gspca_main: pac207-2.14.0 probing 093a:2460 [ 152.925120][ T796] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 152.975723][ T796] (id 0x00) [ 153.147978][ T5901] gspca_pac207: Failed to read a register (index 0x0001, error -110) [ 153.178056][ T5915] usb 4-1: USB disconnect, device number 9 [ 153.332786][ T796] rc_core: IR keymap rc-imon-pad not found [ 153.349389][ T796] Registered IR keymap rc-empty [ 153.365849][ T796] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 153.404136][ T796] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 153.404673][ T5916] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.456936][ T796] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 153.507926][ T796] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input9 [ 153.561203][ T796] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:10> initialized [ 153.624413][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 153.792459][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.805113][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.828423][ T5916] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 153.840688][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.924392][ T5916] usb 2-1: config 0 descriptor?? [ 154.043502][ T6593] capability: warning: `syz.0.165' uses 32-bit capabilities (legacy support in use) [ 154.304390][ T5906] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 154.383614][ T6587] libceph: resolve 'c' (ret=-3): failed [ 154.406903][ T6599] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 154.489778][ T5906] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 154.593288][ T5906] usb 4-1: config 0 has no interface number 0 [ 154.635557][ T5906] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 154.760581][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 154.770353][ T6607] netlink: 1 bytes leftover after parsing attributes in process `syz.4.167'. [ 154.811275][ T5906] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.911496][ T5906] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.940636][ T5906] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 154.986224][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 155.004421][ T5906] usb 4-1: Product: syz [ 155.013664][ T5906] usb 4-1: SerialNumber: syz [ 155.039534][ T5906] usb 4-1: config 0 descriptor?? [ 155.066233][ T5906] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 155.095407][ T5906] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input10 [ 155.385414][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.385633][ T6613] batadv_slave_0: entered promiscuous mode [ 155.385650][ T6613] batadv_slave_0: entered allmulticast mode [ 155.397699][ T6613] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 155.726146][ T5901] usb 3-1: USB disconnect, device number 10 [ 156.080887][ T6616] binder: 6594:6616 ioctl c0306201 2000000003c0 returned -14 [ 156.322798][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 156.329106][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 156.377641][ T5916] usb 2-1: USB disconnect, device number 7 [ 157.471655][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.480295][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.487969][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.495172][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.502329][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.509499][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.516687][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.523848][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.531035][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.538848][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.546094][ T24] usb 4-1: USB disconnect, device number 10 [ 157.553068][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 157.615565][ T24] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 158.141062][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 158.170672][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.201858][ T6640] netlink: 1 bytes leftover after parsing attributes in process `syz.4.174'. [ 158.423986][ T24] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 158.449562][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.512389][ T24] usb 4-1: config 0 descriptor?? [ 160.050778][ T24] gembird 0003:11FF:3331.0005: unknown main item tag 0x3 [ 160.067865][ T24] gembird 0003:11FF:3331.0005: item fetching failed at offset 2/5 [ 160.098599][ T24] gembird 0003:11FF:3331.0005: probe with driver gembird failed with error -22 [ 160.271591][ T5947] usb 4-1: USB disconnect, device number 11 [ 160.557309][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 160.566377][ T6658] netlink: 1 bytes leftover after parsing attributes in process `syz.4.178'. [ 161.814073][ T6675] FAULT_INJECTION: forcing a failure. [ 161.814073][ T6675] name failslab, interval 1, probability 0, space 0, times 1 [ 161.937159][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT(full) [ 161.937189][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.937201][ T6675] Call Trace: [ 161.937210][ T6675] [ 161.937219][ T6675] dump_stack_lvl+0xe8/0x150 [ 161.937253][ T6675] should_fail_ex+0x412/0x560 [ 161.937283][ T6675] should_failslab+0xa8/0x100 [ 161.937310][ T6675] __kmalloc_cache_noprof+0x88/0x660 [ 161.937333][ T6675] ? nft_connlimit_clone+0x7d/0x1f0 [ 161.937365][ T6675] nft_connlimit_clone+0x7d/0x1f0 [ 161.937393][ T6675] nft_set_elem_expr_clone+0x1e8/0xa90 [ 161.937427][ T6675] nf_tables_newsetelem+0x1481/0x44a0 [ 161.937461][ T6675] ? nf_tables_newsetelem+0xd41/0x44a0 [ 161.937525][ T6675] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 161.937554][ T6675] ? __lock_acquire+0x6b5/0x2cf0 [ 161.937593][ T6675] ? nla_validate_array+0xfc/0x260 [ 161.937652][ T6675] ? __pfx___nla_validate_parse+0x10/0x10 [ 161.937684][ T6675] ? nfnetlink_rcv+0x8ba/0x27b0 [ 161.937710][ T6675] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 161.937748][ T6675] ? nfnl_pernet+0x23/0x240 [ 161.937779][ T6675] ? __nla_parse+0x40/0x60 [ 161.937810][ T6675] nfnetlink_rcv+0x1240/0x27b0 [ 161.937874][ T6675] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 161.937912][ T6675] ? ref_tracker_free+0x693/0x840 [ 161.937966][ T6675] ? __netlink_deliver_tap+0x807/0x850 [ 161.937991][ T6675] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.938033][ T6675] netlink_unicast+0x80f/0x9b0 [ 161.938064][ T6675] ? __pfx_netlink_unicast+0x10/0x10 [ 161.938089][ T6675] ? netlink_sendmsg+0x650/0xb40 [ 161.938112][ T6675] ? skb_put+0x11b/0x210 [ 161.938144][ T6675] netlink_sendmsg+0x813/0xb40 [ 161.938184][ T6675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.938213][ T6675] ? aa_sock_msg_perm+0xf1/0x1b0 [ 161.938240][ T6675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.938264][ T6675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.938288][ T6675] ____sys_sendmsg+0xa68/0xad0 [ 161.938328][ T6675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.938368][ T6675] ? import_iovec+0x73/0xa0 [ 161.938401][ T6675] ___sys_sendmsg+0x2a5/0x360 [ 161.938437][ T6675] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.938505][ T6675] ? __fget_files+0x2a/0x420 [ 161.938533][ T6675] ? __fget_files+0x3a0/0x420 [ 161.938574][ T6675] __x64_sys_sendmsg+0x1bd/0x2a0 [ 161.938607][ T6675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.938648][ T6675] ? __pfx_ksys_write+0x10/0x10 [ 161.938682][ T6675] do_syscall_64+0x14d/0xf80 [ 161.938712][ T6675] ? trace_irq_disable+0x3b/0x150 [ 161.938741][ T6675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.938762][ T6675] ? clear_bhb_loop+0x40/0x90 [ 161.938788][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.938809][ T6675] RIP: 0033:0x7f738039c629 [ 161.938834][ T6675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.938850][ T6675] RSP: 002b:00007f73811a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.938872][ T6675] RAX: ffffffffffffffda RBX: 00007f7380616090 RCX: 00007f738039c629 [ 161.938888][ T6675] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 161.938901][ T6675] RBP: 00007f73811a8090 R08: 0000000000000000 R09: 0000000000000000 [ 161.938913][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.938925][ T6675] R13: 00007f7380616128 R14: 00007f7380616090 R15: 00007f738073fa48 [ 161.938959][ T6675] [ 162.594624][ T5906] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 162.799002][ T6695] 5gQ[: renamed from lo (while UP) [ 162.828001][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 162.848919][ T5906] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 162.858266][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.867824][ T5906] usb 3-1: Product: syz [ 162.872013][ T5906] usb 3-1: Manufacturer: syz [ 162.886974][ T5906] usb 3-1: SerialNumber: syz [ 162.893740][ T5906] usb 3-1: config 0 descriptor?? [ 163.027587][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 163.055557][ T6699] netlink: 1 bytes leftover after parsing attributes in process `syz.1.188'. [ 163.112348][ T24] usb 3-1: USB disconnect, device number 11 [ 163.700686][ T5906] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.068774][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.094045][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.124463][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 164.187176][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.241303][ T5906] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.270926][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.332213][ T5906] usb 1-1: config 0 descriptor?? [ 164.787879][ T5906] plantronics 0003:047F:FFFF.0006: item fetching failed at offset 13/15 [ 164.833409][ T5906] plantronics 0003:047F:FFFF.0006: parse failed [ 164.875849][ T5906] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 165.184731][ T5916] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.335423][ T796] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 165.354325][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 165.574853][ T5916] usb 4-1: config 1 has an invalid interface number: 233 but max is 0 [ 165.583191][ T5916] usb 4-1: config 1 has no interface number 0 [ 165.589515][ T5916] usb 4-1: config 1 interface 233 has no altsetting 0 [ 165.603746][ T5916] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 165.604345][ T796] usb 2-1: New USB device found, idVendor=0c45, idProduct=580b, bcdDevice= 0.00 [ 165.613778][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.680156][ T5916] usb 4-1: Product: syz [ 165.687937][ T5916] usb 4-1: Manufacturer: syz [ 165.692688][ T5916] usb 4-1: SerialNumber: syz [ 165.717729][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.808214][ T796] usb 2-1: config 0 descriptor?? [ 165.908475][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.918143][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.927181][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.936825][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.159993][ T796] usbhid 2-1:0.0: can't add hid device: -71 [ 166.167048][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 166.221782][ T796] usb 2-1: USB disconnect, device number 8 [ 166.265671][ T5916] imon_raw 4-1:1.233: IR endpoint missing [ 166.478580][ T5916] usb 4-1: USB disconnect, device number 12 [ 166.524004][ T24] usb 1-1: USB disconnect, device number 10 [ 167.042841][ T6753] FAULT_INJECTION: forcing a failure. [ 167.042841][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 167.064071][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 167.073343][ T6749] netlink: 1 bytes leftover after parsing attributes in process `syz.0.196'. [ 167.092544][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.3.198 Not tainted syzkaller #0 PREEMPT(full) [ 167.092579][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.092591][ T6753] Call Trace: [ 167.092600][ T6753] [ 167.092609][ T6753] dump_stack_lvl+0xe8/0x150 [ 167.092645][ T6753] should_fail_ex+0x412/0x560 [ 167.092676][ T6753] should_failslab+0xa8/0x100 [ 167.092703][ T6753] __kvmalloc_node_noprof+0x178/0x8a0 [ 167.092728][ T6753] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 167.092765][ T6753] __nf_hook_entries_try_shrink+0x328/0x700 [ 167.092806][ T6753] __nf_unregister_net_hook+0x4cc/0x6f0 [ 167.092844][ T6753] nf_unregister_net_hooks+0xcb/0x140 [ 167.092875][ T6753] nf_ct_netns_put+0x36d/0x520 [ 167.092907][ T6753] nft_connlimit_destroy+0x5a/0xb0 [ 167.092931][ T6753] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 167.092957][ T6753] nf_tables_newsetelem+0x2f0f/0x44a0 [ 167.092992][ T6753] ? nf_tables_newsetelem+0xd41/0x44a0 [ 167.093058][ T6753] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 167.093087][ T6753] ? __lock_acquire+0x6b5/0x2cf0 [ 167.093127][ T6753] ? nla_validate_array+0xfc/0x260 [ 167.093188][ T6753] ? __pfx___nla_validate_parse+0x10/0x10 [ 167.093219][ T6753] ? nfnetlink_rcv+0x8ba/0x27b0 [ 167.093246][ T6753] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 167.093284][ T6753] ? nfnl_pernet+0x23/0x240 [ 167.093315][ T6753] ? __nla_parse+0x40/0x60 [ 167.093347][ T6753] nfnetlink_rcv+0x1240/0x27b0 [ 167.093413][ T6753] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 167.093452][ T6753] ? ref_tracker_free+0x693/0x840 [ 167.093507][ T6753] ? __netlink_deliver_tap+0x807/0x850 [ 167.093532][ T6753] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.093576][ T6753] netlink_unicast+0x80f/0x9b0 [ 167.093608][ T6753] ? __pfx_netlink_unicast+0x10/0x10 [ 167.093632][ T6753] ? netlink_sendmsg+0x650/0xb40 [ 167.093655][ T6753] ? skb_put+0x11b/0x210 [ 167.093688][ T6753] netlink_sendmsg+0x813/0xb40 [ 167.093724][ T6753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.093754][ T6753] ? aa_sock_msg_perm+0xf1/0x1b0 [ 167.093780][ T6753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.093805][ T6753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.093829][ T6753] ____sys_sendmsg+0xa68/0xad0 [ 167.093869][ T6753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.093910][ T6753] ? import_iovec+0x73/0xa0 [ 167.093943][ T6753] ___sys_sendmsg+0x2a5/0x360 [ 167.093979][ T6753] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.094048][ T6753] ? __fget_files+0x2a/0x420 [ 167.094076][ T6753] ? __fget_files+0x3a0/0x420 [ 167.094117][ T6753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 167.094151][ T6753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.094193][ T6753] ? __pfx_ksys_write+0x10/0x10 [ 167.094243][ T6753] do_syscall_64+0x14d/0xf80 [ 167.094287][ T6753] ? trace_irq_disable+0x3b/0x150 [ 167.094317][ T6753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.094337][ T6753] ? clear_bhb_loop+0x40/0x90 [ 167.094374][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.094390][ T6753] RIP: 0033:0x7fc5f819c629 [ 167.094405][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.094418][ T6753] RSP: 002b:00007fc5f900e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.094434][ T6753] RAX: ffffffffffffffda RBX: 00007fc5f8415fa0 RCX: 00007fc5f819c629 [ 167.094445][ T6753] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 167.094455][ T6753] RBP: 00007fc5f900e090 R08: 0000000000000000 R09: 0000000000000000 [ 167.094464][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.094473][ T6753] R13: 00007fc5f8416038 R14: 00007fc5f8415fa0 R15: 00007fc5f853fa48 [ 167.094496][ T6753] [ 167.457948][ T6755] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 167.768228][ T6763] loop9: detected capacity change from 0 to 4096 [ 167.968809][ T6761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.485486][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 168.495297][ T6778] netlink: 1 bytes leftover after parsing attributes in process `syz.3.202'. [ 170.399950][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 170.525670][ T6808] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 171.153301][ T6818] block device autoloading is deprecated and will be removed. [ 171.353603][ T6818] netlink: 'syz.2.210': attribute type 4 has an invalid length. [ 171.452061][ T6823] FAULT_INJECTION: forcing a failure. [ 171.452061][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 171.484415][ T6823] CPU: 0 UID: 0 PID: 6823 Comm: syz.3.211 Not tainted syzkaller #0 PREEMPT(full) [ 171.484444][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.484458][ T6823] Call Trace: [ 171.484466][ T6823] [ 171.484474][ T6823] dump_stack_lvl+0xe8/0x150 [ 171.484509][ T6823] should_fail_ex+0x412/0x560 [ 171.484539][ T6823] should_failslab+0xa8/0x100 [ 171.484565][ T6823] ? skb_clone+0x212/0x3a0 [ 171.484595][ T6823] kmem_cache_alloc_noprof+0x87/0x650 [ 171.484638][ T6823] skb_clone+0x212/0x3a0 [ 171.484672][ T6823] __netlink_deliver_tap+0x404/0x850 [ 171.484711][ T6823] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.484739][ T6823] netlink_deliver_tap+0x19c/0x1b0 [ 171.484765][ T6823] netlink_sendskb+0x68/0x140 [ 171.484790][ T6823] netlink_unicast+0x3a3/0x9b0 [ 171.484821][ T6823] ? __pfx_netlink_unicast+0x10/0x10 [ 171.484854][ T6823] nfnetlink_rcv+0x2517/0x27b0 [ 171.484910][ T6823] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 171.484949][ T6823] ? ref_tracker_free+0x693/0x840 [ 171.485017][ T6823] ? __netlink_deliver_tap+0x807/0x850 [ 171.485042][ T6823] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.485085][ T6823] netlink_unicast+0x80f/0x9b0 [ 171.485116][ T6823] ? __pfx_netlink_unicast+0x10/0x10 [ 171.485141][ T6823] ? netlink_sendmsg+0x650/0xb40 [ 171.485169][ T6823] ? skb_put+0x11b/0x210 [ 171.485201][ T6823] netlink_sendmsg+0x813/0xb40 [ 171.485234][ T6823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.485264][ T6823] ? aa_sock_msg_perm+0xf1/0x1b0 [ 171.485291][ T6823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.485315][ T6823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.485339][ T6823] ____sys_sendmsg+0xa68/0xad0 [ 171.485379][ T6823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.485419][ T6823] ? import_iovec+0x73/0xa0 [ 171.485452][ T6823] ___sys_sendmsg+0x2a5/0x360 [ 171.485488][ T6823] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.485560][ T6823] ? __fget_files+0x2a/0x420 [ 171.485589][ T6823] ? __fget_files+0x3a0/0x420 [ 171.485629][ T6823] __x64_sys_sendmsg+0x1bd/0x2a0 [ 171.485663][ T6823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.485703][ T6823] ? __pfx_ksys_write+0x10/0x10 [ 171.485737][ T6823] do_syscall_64+0x14d/0xf80 [ 171.485768][ T6823] ? trace_irq_disable+0x3b/0x150 [ 171.485797][ T6823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.485818][ T6823] ? clear_bhb_loop+0x40/0x90 [ 171.485844][ T6823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.485865][ T6823] RIP: 0033:0x7fc5f819c629 [ 171.485885][ T6823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.485901][ T6823] RSP: 002b:00007fc5f900e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.485924][ T6823] RAX: ffffffffffffffda RBX: 00007fc5f8415fa0 RCX: 00007fc5f819c629 [ 171.485939][ T6823] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 171.485952][ T6823] RBP: 00007fc5f900e090 R08: 0000000000000000 R09: 0000000000000000 [ 171.485964][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.485975][ T6823] R13: 00007fc5f8416038 R14: 00007fc5f8415fa0 R15: 00007fc5f853fa48 [ 171.486014][ T6823] [ 172.077385][ T6826] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 172.199572][ T6826] bond1 (unregistering): Released all slaves [ 172.244968][ T6836] netlink: 'syz.4.215': attribute type 4 has an invalid length. [ 172.266373][ T6836] netlink: 152 bytes leftover after parsing attributes in process `syz.4.215'. [ 172.338042][ T6839] netlink: 'syz.4.215': attribute type 4 has an invalid length. [ 172.357567][ T6836] .`: renamed from bond0 (while UP) [ 172.401224][ T6839] netlink: 152 bytes leftover after parsing attributes in process `syz.4.215'. [ 172.642245][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 172.718661][ T6846] netlink: 1 bytes leftover after parsing attributes in process `syz.3.216'. [ 172.897238][ T6855] capability: warning: `syz.4.218' uses deprecated v2 capabilities in a way that may be insecure [ 173.088485][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 173.088502][ T30] audit: type=1326 audit(1772043630.144:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 173.183509][ T30] audit: type=1326 audit(1772043630.144:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 173.248274][ T30] audit: type=1326 audit(1772043630.184:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 173.383013][ T30] audit: type=1326 audit(1772043630.184:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 173.474433][ T5906] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 173.505724][ T30] audit: type=1326 audit(1772043630.184:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 173.567114][ T30] audit: type=1326 audit(1772043630.184:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 173.621683][ T6869] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.634542][ T30] audit: type=1326 audit(1772043630.184:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 173.694709][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 173.714394][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.725676][ T5906] usb 5-1: can't read configurations, error -71 [ 173.755273][ T30] audit: type=1326 audit(1772043630.184:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 173.807587][ T30] audit: type=1326 audit(1772043630.194:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 173.885389][ T24] usb 2-1: no configurations [ 173.900161][ T24] usb 2-1: can't read configurations, error -22 [ 173.916691][ T30] audit: type=1326 audit(1772043630.194:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 174.074384][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.225224][ T24] usb 2-1: no configurations [ 174.229915][ T24] usb 2-1: can't read configurations, error -22 [ 174.249439][ T24] usb usb2-port1: attempt power cycle [ 174.604373][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.706135][ T24] usb 2-1: no configurations [ 174.737228][ T24] usb 2-1: can't read configurations, error -22 [ 174.792943][ T6889] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 174.813933][ T6887] FAULT_INJECTION: forcing a failure. [ 174.813933][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 174.911014][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.0.223 Not tainted syzkaller #0 PREEMPT(full) [ 174.911044][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.911056][ T6887] Call Trace: [ 174.911064][ T6887] [ 174.911072][ T6887] dump_stack_lvl+0xe8/0x150 [ 174.911108][ T6887] should_fail_ex+0x412/0x560 [ 174.911138][ T6887] should_failslab+0xa8/0x100 [ 174.911166][ T6887] __kmalloc_cache_noprof+0x88/0x660 [ 174.911190][ T6887] ? vhost_task_create+0x123/0x380 [ 174.911217][ T6887] vhost_task_create+0x123/0x380 [ 174.911238][ T6887] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 174.911272][ T6887] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 174.911306][ T6887] ? __pfx_vhost_task_create+0x10/0x10 [ 174.911336][ T6887] ? __pfx_vhost_task_fn+0x10/0x10 [ 174.911367][ T6887] ? __lock_acquire+0x6b5/0x2cf0 [ 174.911402][ T6887] kvm_mmu_post_init_vm+0x14c/0x300 [ 174.911428][ T6887] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 174.911462][ T6887] ? __mutex_trylock_common+0x158/0x260 [ 174.911497][ T6887] ? __pfx___mutex_trylock_common+0x10/0x10 [ 174.911529][ T6887] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 174.911554][ T6887] ? register_lock_class+0x31/0x2e0 [ 174.911584][ T6887] ? __lock_acquire+0x6b5/0x2cf0 [ 174.911620][ T6887] ? kasan_quarantine_put+0xbb/0x1f0 [ 174.911643][ T6887] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 174.911673][ T6887] ? do_raw_write_lock+0x11d/0x260 [ 174.911712][ T6887] kvm_vcpu_ioctl+0xa62/0xfd0 [ 174.911740][ T6887] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 174.911758][ T6887] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 174.911813][ T6887] ? __fget_files+0x2a/0x420 [ 174.911846][ T6887] ? __fget_files+0x2a/0x420 [ 174.911873][ T6887] ? __fget_files+0x3a0/0x420 [ 174.911908][ T6887] ? __fget_files+0x2a/0x420 [ 174.911942][ T6887] ? bpf_lsm_file_ioctl+0x9/0x20 [ 174.911969][ T6887] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 174.911990][ T6887] __se_sys_ioctl+0xfc/0x170 [ 174.912017][ T6887] do_syscall_64+0x14d/0xf80 [ 174.912048][ T6887] ? trace_irq_disable+0x3b/0x150 [ 174.912078][ T6887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.912099][ T6887] ? clear_bhb_loop+0x40/0x90 [ 174.912123][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.912144][ T6887] RIP: 0033:0x7f738039c629 [ 174.912163][ T6887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.912180][ T6887] RSP: 002b:00007f73811c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.912207][ T6887] RAX: ffffffffffffffda RBX: 00007f7380615fa0 RCX: 00007f738039c629 [ 174.912222][ T6887] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 174.912233][ T6887] RBP: 00007f73811c9090 R08: 0000000000000000 R09: 0000000000000000 [ 174.912245][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.912255][ T6887] R13: 00007f7380616038 R14: 00007f7380615fa0 R15: 00007f738073fa48 [ 174.912281][ T6887] [ 174.975021][ T5906] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.212781][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 175.345703][ T24] usb 2-1: no configurations [ 175.379832][ T24] usb 2-1: can't read configurations, error -22 [ 175.447362][ T24] usb usb2-port1: unable to enumerate USB device [ 175.754893][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 175.776910][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.793055][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.855863][ T6905] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 175.895882][ T5906] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 175.930918][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.943839][ T6905] bond1 (unregistering): Released all slaves [ 176.010622][ T5906] usb 5-1: config 0 descriptor?? [ 176.399143][ T6913] fuse: Unknown parameter '' [ 176.524355][ T796] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 176.674345][ T5937] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.754337][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 176.896157][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.928218][ T5937] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 176.954461][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.975271][ T5937] usb 1-1: Product: syz [ 176.990549][ T5937] usb 1-1: Manufacturer: syz [ 177.015847][ T5937] usb 1-1: SerialNumber: syz [ 177.046284][ T5937] usb 1-1: config 0 descriptor?? [ 177.067720][ T5937] hub 1-1:0.0: bad descriptor, ignoring hub [ 177.084168][ T5937] hub 1-1:0.0: probe with driver hub failed with error -5 [ 177.112491][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.151068][ T796] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 177.184320][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.251772][ T796] usb 2-1: config 0 descriptor?? [ 177.287813][ T796] hub 2-1:0.0: USB hub found [ 177.482302][ T796] hub 2-1:0.0: 1 port detected [ 177.505099][ T5937] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 177.808449][ T5937] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 177.865902][ T5937] dib0700: firmware download failed at 7 with -22 [ 178.090317][ T796] hub 2-1:0.0: activate --> -90 [ 178.494122][ T24] usb 2-1: USB disconnect, device number 13 [ 178.526764][ T6934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'. [ 179.108297][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 179.144487][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 179.191977][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.240198][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.234'. [ 179.274957][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 179.288613][ T5906] usb 5-1: USB disconnect, device number 10 [ 179.315449][ T6941] 8021q: VLANs not supported on vcan0 [ 179.445044][ T24] usb 3-1: device descriptor read/64, error -71 [ 179.714421][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 179.866571][ T5906] usb 1-1: USB disconnect, device number 11 [ 179.884676][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 179.906777][ T24] usb 3-1: device descriptor read/64, error -71 [ 179.917924][ T6950] netlink: 1 bytes leftover after parsing attributes in process `syz.4.235'. [ 180.015874][ T24] usb usb3-port1: attempt power cycle [ 180.374355][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 180.443278][ T24] usb 3-1: device descriptor read/8, error -71 [ 180.527420][ T6956] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 180.724418][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 180.765552][ T24] usb 3-1: device descriptor read/8, error -71 [ 180.783284][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 180.783297][ T30] audit: type=1326 audit(1772043637.844:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 180.823901][ T30] audit: type=1326 audit(1772043637.884:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 180.846821][ T30] audit: type=1326 audit(1772043637.884:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 180.886965][ T30] audit: type=1326 audit(1772043637.884:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 180.909619][ T30] audit: type=1326 audit(1772043637.884:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 180.934758][ T24] usb usb3-port1: unable to enumerate USB device [ 180.961560][ T30] audit: type=1326 audit(1772043637.884:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 181.012560][ T30] audit: type=1326 audit(1772043637.884:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a6899c629 code=0x7ffc0000 [ 181.046446][ T30] audit: type=1326 audit(1772043637.884:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 181.074161][ T30] audit: type=1326 audit(1772043637.884:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 181.099193][ T30] audit: type=1326 audit(1772043637.944:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 181.224520][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 181.244732][ T5947] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 181.394978][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 181.402233][ T5947] usb 4-1: no configurations [ 181.407496][ T5947] usb 4-1: can't read configurations, error -22 [ 181.424853][ T24] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 181.441781][ T24] usb 2-1: config 4 has no interface number 0 [ 181.448472][ T24] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 181.469102][ T24] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 181.489325][ T24] usb 2-1: config 4 interface 9 has no altsetting 0 [ 181.503280][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 181.513097][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.521248][ T24] usb 2-1: Product: syz [ 181.525500][ T24] usb 2-1: Manufacturer: syz [ 181.530138][ T24] usb 2-1: SerialNumber: syz [ 181.530533][ T6975] binder: 6974:6975 ioctl c0306201 200000001440 returned -11 [ 181.546563][ T5947] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 181.560541][ T6963] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.571572][ T6963] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.604492][ T796] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.612356][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 181.705816][ T5947] usb 4-1: no configurations [ 181.710806][ T5947] usb 4-1: can't read configurations, error -22 [ 181.717853][ T5947] usb usb4-port1: attempt power cycle [ 181.764964][ T796] usb 1-1: Using ep0 maxpacket: 16 [ 181.776905][ T796] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 181.792643][ T796] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 181.800337][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.800768][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.819997][ T796] usb 1-1: config 0 has no interface number 0 [ 181.823512][ T5937] usb 2-1: USB disconnect, device number 14 [ 181.834562][ T1336] usb 2-1: Failed to submit usb control message: -71 [ 181.842531][ T1336] usb 2-1: unable to send the bmi data to the device: -71 [ 181.857179][ T1336] usb 2-1: unable to get target info from device [ 181.862362][ T796] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 181.866660][ T1336] usb 2-1: could not get target info (-71) [ 181.879211][ T1336] usb 2-1: could not probe fw (-71) [ 181.891895][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.920162][ T796] usb 1-1: Product: syz [ 181.939882][ T796] usb 1-1: Manufacturer: syz [ 181.956363][ T796] usb 1-1: SerialNumber: syz [ 181.978364][ T796] usb 1-1: config 0 descriptor?? [ 182.016716][ T796] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 182.030419][ T796] uvcvideo 1-1:0.105: No valid video chain found. [ 182.098435][ T5947] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.156425][ T5947] usb 4-1: no configurations [ 182.163903][ T5947] usb 4-1: can't read configurations, error -22 [ 182.304578][ T5947] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 182.350496][ T5947] usb 4-1: no configurations [ 182.355275][ T5916] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 182.369268][ T5947] usb 4-1: can't read configurations, error -22 [ 182.405032][ T5947] usb usb4-port1: unable to enumerate USB device [ 182.534369][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 182.584729][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.611738][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.640633][ T5916] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 182.663965][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.704059][ T5916] usb 5-1: config 0 descriptor?? [ 182.794423][ T5947] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 182.974807][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 182.991562][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 183.027896][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 183.074806][ T5947] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 183.102422][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.124166][ T5947] usb 2-1: Product: syz [ 183.137223][ T5947] usb 2-1: Manufacturer: syz [ 183.152683][ T5947] usb 2-1: SerialNumber: syz [ 183.236805][ T5947] usb 2-1: config 0 descriptor?? [ 183.374941][ T5947] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 183.387692][ T5947] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 183.591394][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 183.772001][ T7005] FAULT_INJECTION: forcing a failure. [ 183.772001][ T7005] name failslab, interval 1, probability 0, space 0, times 0 [ 183.821397][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.2.249 Not tainted syzkaller #0 PREEMPT(full) [ 183.821426][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.821439][ T7005] Call Trace: [ 183.821446][ T7005] [ 183.821452][ T7005] dump_stack_lvl+0xe8/0x150 [ 183.821478][ T7005] should_fail_ex+0x412/0x560 [ 183.821500][ T7005] should_failslab+0xa8/0x100 [ 183.821518][ T7005] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 183.821542][ T7005] kmem_cache_alloc_noprof+0x87/0x650 [ 183.821567][ T7005] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 183.821587][ T7005] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 183.821618][ T7005] mmu_topup_memory_caches+0x21/0x170 [ 183.821643][ T7005] kvm_mmu_load+0x9d/0x22d0 [ 183.821666][ T7005] ? kvm_msr_allowed+0x3f4/0x490 [ 183.821681][ T7005] ? kvm_msr_allowed+0x9a/0x490 [ 183.821700][ T7005] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 183.821716][ T7005] ? kvm_apic_has_interrupt+0x73c/0x770 [ 183.821763][ T7005] vcpu_run+0x5faf/0x7b90 [ 183.821868][ T7005] ? __pfx_vcpu_run+0x10/0x10 [ 183.821885][ T7005] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 183.821909][ T7005] ? rcu_is_watching+0x15/0xb0 [ 183.821946][ T7005] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 183.821974][ T7005] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 183.821991][ T7005] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 183.822008][ T7005] ? register_lock_class+0x31/0x2e0 [ 183.822029][ T7005] ? __lock_acquire+0x6b5/0x2cf0 [ 183.822053][ T7005] ? kasan_quarantine_put+0xbb/0x1f0 [ 183.822074][ T7005] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 183.822099][ T7005] ? do_raw_write_lock+0x11d/0x260 [ 183.822130][ T7005] kvm_vcpu_ioctl+0xa62/0xfd0 [ 183.822167][ T7005] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.822180][ T7005] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 183.822232][ T7005] ? __fget_files+0x2a/0x420 [ 183.822256][ T7005] ? __fget_files+0x2a/0x420 [ 183.822276][ T7005] ? __fget_files+0x3a0/0x420 [ 183.822296][ T7005] ? __fget_files+0x2a/0x420 [ 183.822320][ T7005] ? bpf_lsm_file_ioctl+0x9/0x20 [ 183.822339][ T7005] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.822354][ T7005] __se_sys_ioctl+0xfc/0x170 [ 183.822394][ T7005] do_syscall_64+0x14d/0xf80 [ 183.822425][ T7005] ? trace_irq_disable+0x3b/0x150 [ 183.822455][ T7005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.822478][ T7005] ? clear_bhb_loop+0x40/0x90 [ 183.822505][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.822521][ T7005] RIP: 0033:0x7f5d8db9c629 [ 183.822536][ T7005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.822549][ T7005] RSP: 002b:00007f5d8e978028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.822565][ T7005] RAX: ffffffffffffffda RBX: 00007f5d8de15fa0 RCX: 00007f5d8db9c629 [ 183.822576][ T7005] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 183.822585][ T7005] RBP: 00007f5d8e978090 R08: 0000000000000000 R09: 0000000000000000 [ 183.822593][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.822602][ T7005] R13: 00007f5d8de16038 R14: 00007f5d8de15fa0 R15: 00007f5d8df3fa48 [ 183.822625][ T7005] [ 184.182095][ T5947] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 184.207677][ T5947] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 184.232043][ T7009] FAULT_INJECTION: forcing a failure. [ 184.232043][ T7009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.245355][ T7009] CPU: 1 UID: 0 PID: 7009 Comm: syz.3.250 Not tainted syzkaller #0 PREEMPT(full) [ 184.245383][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.245397][ T7009] Call Trace: [ 184.245405][ T7009] [ 184.245414][ T7009] dump_stack_lvl+0xe8/0x150 [ 184.245448][ T7009] should_fail_ex+0x412/0x560 [ 184.245478][ T7009] _copy_from_iter+0x1d3/0x1670 [ 184.245509][ T7009] ? rcu_is_watching+0x15/0xb0 [ 184.245545][ T7009] ? __pfx__copy_from_iter+0x10/0x10 [ 184.245580][ T7009] ? netlink_sendmsg+0x650/0xb40 [ 184.245604][ T7009] ? skb_put+0x11b/0x210 [ 184.245636][ T7009] netlink_sendmsg+0x6c0/0xb40 [ 184.245671][ T7009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.245701][ T7009] ? aa_sock_msg_perm+0xf1/0x1b0 [ 184.245728][ T7009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.245753][ T7009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.245777][ T7009] ____sys_sendmsg+0xa68/0xad0 [ 184.245818][ T7009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.245857][ T7009] ? import_iovec+0x73/0xa0 [ 184.245898][ T7009] ___sys_sendmsg+0x2a5/0x360 [ 184.245934][ T7009] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.246000][ T7009] ? __fget_files+0x2a/0x420 [ 184.246029][ T7009] ? __fget_files+0x3a0/0x420 [ 184.246068][ T7009] __x64_sys_sendmsg+0x1bd/0x2a0 [ 184.246103][ T7009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.246145][ T7009] ? __pfx_ksys_write+0x10/0x10 [ 184.246178][ T7009] do_syscall_64+0x14d/0xf80 [ 184.246210][ T7009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.246232][ T7009] ? clear_bhb_loop+0x40/0x90 [ 184.246258][ T7009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.246279][ T7009] RIP: 0033:0x7fc5f819c629 [ 184.246299][ T7009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.246320][ T7009] RSP: 002b:00007fc5f900e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.246342][ T7009] RAX: ffffffffffffffda RBX: 00007fc5f8415fa0 RCX: 00007fc5f819c629 [ 184.246357][ T7009] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 184.246370][ T7009] RBP: 00007fc5f900e090 R08: 0000000000000000 R09: 0000000000000000 [ 184.246383][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.246395][ T7009] R13: 00007fc5f8416038 R14: 00007fc5f8415fa0 R15: 00007fc5f853fa48 [ 184.246426][ T7009] [ 184.549344][ T796] usb 1-1: USB disconnect, device number 12 [ 184.753092][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 184.786565][ T7016] netlink: 1 bytes leftover after parsing attributes in process `syz.0.251'. [ 184.941115][ T5947] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 184.995467][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 185.390489][ T7029] syz.2.255 uses obsolete (PF_INET,SOCK_PACKET) [ 185.681082][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.255'. [ 185.744329][ T5947] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 185.796512][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 185.928087][ T5916] usbhid 5-1:0.0: can't add hid device: -71 [ 185.935897][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 185.942591][ T5916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 185.951754][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 185.960758][ T5916] usb 5-1: USB disconnect, device number 11 [ 185.984616][ T5947] usb 2-1: USB disconnect, device number 15 [ 186.190346][ T7038] macvtap1: entered promiscuous mode [ 186.205759][ T7038] macvtap1: entered allmulticast mode [ 186.230493][ T7038] veth1_vlan: entered allmulticast mode [ 186.574551][ T5916] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 186.635068][ T7055] loop3: detected capacity change from 0 to 7 [ 186.679254][ T5880] Dev loop3: unable to read RDB block 7 [ 186.698622][ T5880] loop3: unable to read partition table [ 186.726529][ T5880] loop3: partition table beyond EOD, truncated [ 186.750711][ T5916] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 186.769694][ T7059] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 186.809077][ T5916] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 186.827435][ T7055] Dev loop3: unable to read RDB block 7 [ 186.833364][ T7055] loop3: unable to read partition table [ 186.874899][ T7055] loop3: partition table beyond EOD, truncated [ 186.985034][ T5916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.012545][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 187.024442][ T7055] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 187.041118][ T5916] usb 3-1: config 1 has no interface number 0 [ 187.099089][ T5916] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 187.148804][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.240417][ T5916] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 187.267881][ T7067] FAULT_INJECTION: forcing a failure. [ 187.267881][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 187.303336][ T7067] CPU: 1 UID: 0 PID: 7067 Comm: syz.0.262 Not tainted syzkaller #0 PREEMPT(full) [ 187.303367][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.303380][ T7067] Call Trace: [ 187.303389][ T7067] [ 187.303398][ T7067] dump_stack_lvl+0xe8/0x150 [ 187.303434][ T7067] should_fail_ex+0x412/0x560 [ 187.303463][ T7067] should_failslab+0xa8/0x100 [ 187.303489][ T7067] ? skb_clone+0x212/0x3a0 [ 187.303529][ T7067] kmem_cache_alloc_noprof+0x87/0x650 [ 187.303562][ T7067] ? __netlink_lookup+0xc6/0x8b0 [ 187.303595][ T7067] skb_clone+0x212/0x3a0 [ 187.303630][ T7067] __netlink_deliver_tap+0x404/0x850 [ 187.303667][ T7067] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.303694][ T7067] netlink_deliver_tap+0x19c/0x1b0 [ 187.303721][ T7067] netlink_unicast+0x7e3/0x9b0 [ 187.303751][ T7067] ? __pfx_netlink_unicast+0x10/0x10 [ 187.303776][ T7067] ? netlink_sendmsg+0x650/0xb40 [ 187.303799][ T7067] ? skb_put+0x11b/0x210 [ 187.303830][ T7067] netlink_sendmsg+0x813/0xb40 [ 187.303865][ T7067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.303894][ T7067] ? aa_sock_msg_perm+0xf1/0x1b0 [ 187.303920][ T7067] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.303944][ T7067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.303968][ T7067] ____sys_sendmsg+0xa68/0xad0 [ 187.304008][ T7067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.304048][ T7067] ? import_iovec+0x73/0xa0 [ 187.304081][ T7067] ___sys_sendmsg+0x2a5/0x360 [ 187.304117][ T7067] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.304182][ T7067] ? __fget_files+0x2a/0x420 [ 187.304211][ T7067] ? __fget_files+0x3a0/0x420 [ 187.304253][ T7067] __x64_sys_sendmsg+0x1bd/0x2a0 [ 187.304287][ T7067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.304327][ T7067] ? __pfx_ksys_write+0x10/0x10 [ 187.304361][ T7067] do_syscall_64+0x14d/0xf80 [ 187.304392][ T7067] ? trace_irq_disable+0x3b/0x150 [ 187.304421][ T7067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.304442][ T7067] ? clear_bhb_loop+0x40/0x90 [ 187.304468][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.304490][ T7067] RIP: 0033:0x7f738039c629 [ 187.304518][ T7067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.304535][ T7067] RSP: 002b:00007f7381187028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.304557][ T7067] RAX: ffffffffffffffda RBX: 00007f7380616180 RCX: 00007f738039c629 [ 187.304572][ T7067] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 187.304585][ T7067] RBP: 00007f7381187090 R08: 0000000000000000 R09: 0000000000000000 [ 187.304597][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.304609][ T7067] R13: 00007f7380616218 R14: 00007f7380616180 R15: 00007f738073fa48 [ 187.304642][ T7067] [ 187.630493][ T7065] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 187.681608][ T5916] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 187.715152][ T7067] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 187.724121][ T5916] snd_usb_pod 3-1:1.1: invalid control EP [ 187.740471][ T5916] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 187.757311][ T5916] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 187.775901][ T5916] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 187.797587][ T7067] bond1 (unregistering): Released all slaves [ 187.998351][ T5947] usb 3-1: USB disconnect, device number 16 [ 188.106905][ T7070] Cannot find add_set index 0 as target [ 188.129182][ T7070] netdevsim netdevsim1: Direct firmware load for / [ 188.129182][ T7070] failed with error -2 [ 188.144312][ T7070] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 188.144312][ T7070] [ 188.656148][ T5916] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 188.831933][ T5916] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 188.860160][ T5916] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 188.891165][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.915972][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 188.915987][ T30] audit: type=1326 audit(1772043645.984:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 188.947954][ T5916] usb 1-1: Product: syz [ 188.952160][ T5916] usb 1-1: Manufacturer: syz [ 188.956978][ T5937] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 188.989446][ T7089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.268'. [ 188.998723][ T5916] usb 1-1: SerialNumber: syz [ 189.068191][ T5916] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 189.082251][ T30] audit: type=1326 audit(1772043646.014:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 189.128244][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.185125][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 189.199202][ T30] audit: type=1326 audit(1772043646.034:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 189.224376][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.235214][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.243576][ T30] audit: type=1326 audit(1772043646.034:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 189.277719][ T5937] usb 3-1: config 0 descriptor?? [ 189.304613][ T30] audit: type=1326 audit(1772043646.034:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 189.327672][ T7086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 189.345647][ T5937] hub 3-1:0.0: USB hub found [ 189.351589][ T30] audit: type=1326 audit(1772043646.034:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 189.373877][ T30] audit: type=1326 audit(1772043646.034:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 189.467456][ T30] audit: type=1326 audit(1772043646.034:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 189.498250][ T30] audit: type=1326 audit(1772043646.034:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 189.523460][ T30] audit: type=1326 audit(1772043646.034:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 189.560641][ T5937] hub 3-1:0.0: 2 ports detected [ 189.667939][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 189.897645][ T5916] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 189.944521][ T5901] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 189.972475][ T7086] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 190.006450][ T5937] usb 3-1: USB disconnect, device number 17 [ 190.107798][ T5901] usb 4-1: config 0 has an invalid interface number: 234 but max is 0 [ 190.132238][ T5901] usb 4-1: config 0 has no interface number 0 [ 190.150075][ T5901] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=b7.44 [ 190.164790][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.172977][ T5901] usb 4-1: Product: syz [ 190.181551][ T5901] usb 4-1: Manufacturer: syz [ 190.186721][ T5901] usb 4-1: SerialNumber: syz [ 190.201502][ T5901] usb 4-1: config 0 descriptor?? [ 190.218133][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 190.230202][ T5901] usb 4-1: bad CDC descriptors [ 190.235985][ T5901] usb 4-1: unsupported MDLM descriptors [ 190.241779][ T7104] netlink: 1 bytes leftover after parsing attributes in process `syz.4.272'. [ 190.252246][ T7106] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 190.444758][ T5937] usb 4-1: USB disconnect, device number 17 [ 190.730701][ T7112] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 191.239588][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.279'. [ 191.518754][ T24] usb 1-1: USB disconnect, device number 13 [ 192.054351][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 192.179231][ T7145] FAULT_INJECTION: forcing a failure. [ 192.179231][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 192.179263][ T7145] CPU: 0 UID: 0 PID: 7145 Comm: syz.3.285 Not tainted syzkaller #0 PREEMPT(full) [ 192.179279][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.179286][ T7145] Call Trace: [ 192.179291][ T7145] [ 192.179297][ T7145] dump_stack_lvl+0xe8/0x150 [ 192.179320][ T7145] should_fail_ex+0x412/0x560 [ 192.179340][ T7145] should_failslab+0xa8/0x100 [ 192.179356][ T7145] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 192.179381][ T7145] kmem_cache_alloc_noprof+0x87/0x650 [ 192.179427][ T7145] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 192.179448][ T7145] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 192.179492][ T7145] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 192.179522][ T7145] mmu_topup_memory_caches+0x21/0x170 [ 192.179550][ T7145] kvm_mmu_load+0x9d/0x22d0 [ 192.179572][ T7145] ? kvm_msr_allowed+0x3f4/0x490 [ 192.179587][ T7145] ? kvm_msr_allowed+0x9a/0x490 [ 192.179606][ T7145] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 192.179621][ T7145] ? kvm_apic_has_interrupt+0x73c/0x770 [ 192.179646][ T7145] vcpu_run+0x5faf/0x7b90 [ 192.179716][ T7145] ? __pfx_vcpu_run+0x10/0x10 [ 192.179731][ T7145] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 192.179755][ T7145] ? rcu_is_watching+0x15/0xb0 [ 192.179779][ T7145] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 192.179807][ T7145] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 192.179825][ T7145] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 192.179842][ T7145] ? register_lock_class+0x31/0x2e0 [ 192.179864][ T7145] ? __lock_acquire+0x6b5/0x2cf0 [ 192.179889][ T7145] ? kasan_quarantine_put+0xbb/0x1f0 [ 192.179905][ T7145] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 192.179925][ T7145] ? do_raw_write_lock+0x11d/0x260 [ 192.179952][ T7145] kvm_vcpu_ioctl+0xa62/0xfd0 [ 192.179970][ T7145] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.179984][ T7145] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 192.180022][ T7145] ? __fget_files+0x2a/0x420 [ 192.180046][ T7145] ? __fget_files+0x2a/0x420 [ 192.180066][ T7145] ? __fget_files+0x3a0/0x420 [ 192.180086][ T7145] ? __fget_files+0x2a/0x420 [ 192.180109][ T7145] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.180128][ T7145] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.180143][ T7145] __se_sys_ioctl+0xfc/0x170 [ 192.180161][ T7145] do_syscall_64+0x14d/0xf80 [ 192.180183][ T7145] ? trace_irq_disable+0x3b/0x150 [ 192.180205][ T7145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.180220][ T7145] ? clear_bhb_loop+0x40/0x90 [ 192.180239][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.180253][ T7145] RIP: 0033:0x7fc5f819c629 [ 192.180267][ T7145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.180279][ T7145] RSP: 002b:00007fc5f900e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.180295][ T7145] RAX: ffffffffffffffda RBX: 00007fc5f8415fa0 RCX: 00007fc5f819c629 [ 192.180306][ T7145] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 192.180315][ T7145] RBP: 00007fc5f900e090 R08: 0000000000000000 R09: 0000000000000000 [ 192.180324][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.180332][ T7145] R13: 00007fc5f8416038 R14: 00007fc5f8415fa0 R15: 00007fc5f853fa48 [ 192.180355][ T7145] [ 192.293871][ T24] usb 1-1: config 0 has no interfaces? [ 192.315759][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 192.315791][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 192.315812][ T24] usb 1-1: Manufacturer: syz [ 192.439501][ T24] usb 1-1: config 0 descriptor?? [ 192.914451][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 192.943825][ T7157] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 193.097146][ T7157] bond2: entered promiscuous mode [ 193.097472][ T7157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.113329][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 193.121273][ T10] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 193.121297][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.121312][ T10] usb 3-1: Product: syz [ 193.121323][ T10] usb 3-1: Manufacturer: syz [ 193.121334][ T10] usb 3-1: SerialNumber: syz [ 193.293647][ T7157] bond2: (slave bridge2): making interface the new active one [ 193.293684][ T7157] bridge2: entered promiscuous mode [ 193.298953][ T7157] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 193.743804][ T5916] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.863643][ T7164] bond1 (unregistering): Released all slaves [ 194.144302][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.144323][ T5916] usb 5-1: config 0 has no interface number 0 [ 194.147866][ T5916] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 194.147889][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.147905][ T5916] usb 5-1: Product: syz [ 194.147916][ T5916] usb 5-1: Manufacturer: syz [ 194.147926][ T5916] usb 5-1: SerialNumber: syz [ 194.150689][ T5916] usb 5-1: config 0 descriptor?? [ 194.370108][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.370237][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.372090][ T5916] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 194.373272][ T5916] usb 5-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 194.373291][ T5916] usb 5-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 194.638546][ T7170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.428984][ T24] usb 1-1: USB disconnect, device number 14 [ 195.601628][ T10] usb 3-1: selecting invalid altsetting 1 [ 195.607946][ T10] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 195.608100][ T10] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 195.641430][ T10] usb 3-1: USB disconnect, device number 18 [ 196.212074][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 196.248414][ T7183] netlink: 1 bytes leftover after parsing attributes in process `syz.2.294'. [ 196.614540][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 196.795542][ T10] usb 1-1: too many configurations: 164, using maximum allowed: 8 [ 196.828478][ T10] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 196.846476][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.868423][ T10] usb 1-1: config 0 descriptor?? [ 196.889026][ T10] usb 1-1: bad CDC descriptors [ 197.337869][ T7201] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 197.446635][ T7201] bond1: entered promiscuous mode [ 197.472343][ T7201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.484352][ T796] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 197.654369][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 197.685422][ T796] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.700707][ T796] usb 4-1: config 0 has no interface number 0 [ 197.719594][ T796] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.740217][ T7208] bond1: (slave bridge1): making interface the new active one [ 197.749056][ T796] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.757813][ T7208] bridge1: entered promiscuous mode [ 197.764895][ T7208] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 197.775201][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.788474][ T796] usb 4-1: config 0 descriptor?? [ 197.798279][ T796] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 197.866951][ T7209] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 197.959175][ T7204] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 197.989618][ T7204] bond0 (unregistering): Released all slaves [ 198.004083][ T796] usb 4-1: USB disconnect, device number 18 [ 198.234422][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 198.405969][ T24] usb 2-1: config 0 has no interfaces? [ 198.425435][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 198.444351][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 198.462152][ T24] usb 2-1: Manufacturer: syz [ 198.480195][ T24] usb 2-1: config 0 descriptor?? [ 198.743996][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 199.053611][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 199.118643][ T7239] bond2 (unregistering): Released all slaves [ 199.466833][ T24] usb 1-1: USB disconnect, device number 15 [ 199.735719][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 199.801095][ T7245] netlink: 1 bytes leftover after parsing attributes in process `syz.2.310'. [ 199.934354][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 200.134388][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 200.158554][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 200.169041][ T7252] netlink: 1 bytes leftover after parsing attributes in process `syz.3.312'. [ 200.286146][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.318776][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.352844][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.408326][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 200.443173][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.488315][ T24] usb 1-1: config 0 descriptor?? [ 200.813377][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 200.878712][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 200.938870][ T24] usb 1-1: USB disconnect, device number 16 [ 201.251852][ T24] usb 2-1: USB disconnect, device number 16 [ 201.278407][ T7260] openvswitch: netlink: IP tunnel dst address not specified [ 202.214406][ T5937] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 202.438707][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 202.480499][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.319'. [ 202.627418][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.649943][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.679606][ T5937] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 202.708641][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.744368][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 202.757576][ T5937] usb 2-1: config 0 descriptor?? [ 202.952731][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 203.004352][ T10] usb 4-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 203.054658][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.088489][ T10] usb 4-1: config 0 descriptor?? [ 203.108134][ T7290] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.239870][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 203.272222][ T7264] libceph: resolve 'c' (ret=-3): failed [ 203.535935][ T10] betop 0003:8380:1850.0007: report_id 1146923772 is invalid [ 203.577201][ T10] betop 0003:8380:1850.0007: item 0 4 1 8 parsing failed [ 203.617186][ T10] betop 0003:8380:1850.0007: parse failed [ 203.641789][ T10] betop 0003:8380:1850.0007: probe with driver betop failed with error -22 [ 203.714458][ T5915] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 203.898310][ T5915] usb 3-1: config 0 has no interfaces? [ 203.898941][ T5906] usb 4-1: USB disconnect, device number 19 [ 203.950954][ T5915] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 204.051378][ T5915] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 204.136839][ T5915] usb 3-1: Manufacturer: syz [ 204.196935][ T5915] usb 3-1: config 0 descriptor?? [ 204.906915][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 204.940429][ T7311] netlink: 1 bytes leftover after parsing attributes in process `syz.3.326'. [ 206.583020][ T5937] usbhid 2-1:0.0: can't add hid device: -71 [ 206.608298][ T5937] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 206.650110][ T5937] usb 2-1: USB disconnect, device number 17 [ 207.094335][ T5937] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 207.126684][ T7317] vlan0: entered promiscuous mode [ 207.214142][ T10] IPVS: starting estimator thread 0... [ 207.264381][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 207.306822][ T5937] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 207.324592][ T7323] IPVS: using max 29 ests per chain, 69600 per kthread [ 207.345873][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.354080][ T7329] kAFS: unable to lookup cell '' [ 207.356355][ T7329] kAFS: unable to lookup cell '(,c' [ 207.365755][ T5937] usb 2-1: Product: syz [ 207.365780][ T5937] usb 2-1: Manufacturer: syz [ 207.395481][ T5937] usb 2-1: SerialNumber: syz [ 207.462216][ T5937] r8152-cfgselector 2-1: Unknown version 0x0000 [ 207.499751][ T5937] r8152-cfgselector 2-1: config 0 descriptor?? [ 207.528333][ T5906] usb 3-1: USB disconnect, device number 19 [ 207.743789][ T7335] netlink: 56 bytes leftover after parsing attributes in process `syz.4.332'. [ 208.274577][ T7342] openvswitch: netlink: IPv4 tunnel dst address is zero [ 208.342723][ T7342] loop5: detected capacity change from 0 to 7 [ 208.376310][ T5996] Dev loop5: unable to read RDB block 7 [ 208.382041][ T5996] loop5: unable to read partition table [ 208.428686][ T5996] loop5: partition table beyond EOD, truncated [ 208.464561][ T7342] Dev loop5: unable to read RDB block 7 [ 208.544391][ T7342] loop5: unable to read partition table [ 208.558516][ T7342] loop5: partition table beyond EOD, truncated [ 208.566538][ T7342] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 208.812577][ T7343] cgroup: fork rejected by pids controller in /syz1 [ 209.702363][ T5937] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 210.059096][ T5937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.118157][ T5937] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 210.162265][ T5937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.338588][ T5906] r8152-cfgselector 2-1: USB disconnect, device number 18 [ 210.404363][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.434324][ T5937] usb 4-1: Product: syz [ 210.444310][ T5937] usb 4-1: Manufacturer: syz [ 210.454399][ T5937] usb 4-1: SerialNumber: syz [ 210.488322][ T5937] cdc_mbim 4-1:1.0: skipping garbage [ 210.630745][ T7793] fuse: Bad value for 'fd' [ 210.942714][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 210.996785][ T5937] cdc_mbim 4-1:1.0: bind() failure [ 211.046013][ T7796] netlink: 1 bytes leftover after parsing attributes in process `syz.1.338'. [ 211.210613][ T5937] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 211.210656][ T5937] cdc_ncm 4-1:1.1: bind() failure [ 211.242559][ T5937] usb 4-1: USB disconnect, device number 20 [ 211.526021][ T7809] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.342'. [ 211.613258][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 211.784593][ T7786] Bluetooth: hci1: command 0x0406 tx timeout [ 211.800926][ T7785] Bluetooth: hci2: command 0x0406 tx timeout [ 211.800944][ T7786] Bluetooth: hci3: command 0x0406 tx timeout [ 211.813871][ T7785] Bluetooth: hci4: command 0x0406 tx timeout [ 211.813875][ T7786] Bluetooth: hci0: command 0x0406 tx timeout [ 212.202085][ T7802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.911981][ T7823] mmap: syz.1.345 (7823) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 213.567565][ T7832] random: crng reseeded on system resumption [ 213.784422][ T796] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 214.054319][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 214.104193][ T796] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 214.188106][ T796] usb 2-1: config 0 has no interfaces? [ 215.672065][ T796] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 215.706303][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.810599][ T796] usb 2-1: Product: syz [ 215.836942][ T796] usb 2-1: Manufacturer: syz [ 215.865937][ T796] usb 2-1: SerialNumber: syz [ 215.902267][ T796] usb 2-1: config 0 descriptor?? [ 216.550175][ T7849] netlink: 'syz.0.350': attribute type 15 has an invalid length. [ 217.073082][ T7858] netlink: 56 bytes leftover after parsing attributes in process `syz.3.352'. [ 217.653242][ T796] usb 2-1: USB disconnect, device number 19 [ 217.760927][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 217.944394][ T24] usb 1-1: device descriptor read/64, error -71 [ 218.109119][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 218.130697][ T7869] netlink: 1 bytes leftover after parsing attributes in process `syz.4.355'. [ 218.191519][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 218.354360][ T24] usb 1-1: device descriptor read/64, error -71 [ 218.507005][ T24] usb usb1-port1: attempt power cycle [ 218.966254][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 219.026313][ T24] usb 1-1: device descriptor read/8, error -71 [ 219.314375][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 219.984443][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 220.431030][ T24] usb 1-1: device descriptor read/8, error -71 [ 220.564639][ T24] usb usb1-port1: unable to enumerate USB device [ 221.053048][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 221.071517][ T7893] netlink: 1 bytes leftover after parsing attributes in process `syz.2.360'. [ 222.614845][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 222.614861][ T30] audit: type=1326 audit(1772043679.674:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 222.676709][ T30] audit: type=1326 audit(1772043679.734:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 222.724507][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.366'. [ 222.736431][ T30] audit: type=1326 audit(1772043679.734:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 222.786910][ T30] audit: type=1326 audit(1772043679.734:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 222.809659][ T30] audit: type=1326 audit(1772043679.734:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 222.834962][ T30] audit: type=1326 audit(1772043679.734:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 222.924328][ T30] audit: type=1326 audit(1772043679.804:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 222.982505][ T30] audit: type=1326 audit(1772043679.804:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 223.046953][ T30] audit: type=1326 audit(1772043679.804:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 223.493255][ T7929] netlink: 56 bytes leftover after parsing attributes in process `syz.2.368'. [ 223.920336][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 223.929567][ T7932] netlink: 1 bytes leftover after parsing attributes in process `syz.3.369'. [ 224.824338][ T796] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 225.288273][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 225.379815][ T796] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 225.454569][ T796] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 225.501246][ T796] usb 2-1: Product: syz [ 225.511013][ T796] usb 2-1: Manufacturer: syz [ 225.522514][ T796] usb 2-1: SerialNumber: syz [ 225.556028][ T796] usb 2-1: config 0 descriptor?? [ 225.576410][ T796] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 225.772167][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.796451][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.927379][ T7956] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 225.969646][ T7956] FAULT_INJECTION: forcing a failure. [ 225.969646][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 226.009563][ T7956] CPU: 1 UID: 0 PID: 7956 Comm: syz.2.376 Not tainted syzkaller #0 PREEMPT(full) [ 226.009597][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.009609][ T7956] Call Trace: [ 226.009620][ T7956] [ 226.009633][ T7956] dump_stack_lvl+0xe8/0x150 [ 226.009659][ T7956] should_fail_ex+0x412/0x560 [ 226.009681][ T7956] should_failslab+0xa8/0x100 [ 226.009699][ T7956] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 226.009723][ T7956] kmem_cache_alloc_noprof+0x87/0x650 [ 226.009747][ T7956] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 226.009768][ T7956] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 226.009799][ T7956] mmu_topup_memory_caches+0x21/0x170 [ 226.009825][ T7956] kvm_mmu_load+0x9d/0x22d0 [ 226.009850][ T7956] ? pic_update_irq+0x3ba/0x800 [ 226.009873][ T7956] ? vmx_get_rflags+0x20c/0x3f0 [ 226.009892][ T7956] ? kvm_apic_has_interrupt+0x4b1/0x770 [ 226.009918][ T7956] vcpu_run+0x5faf/0x7b90 [ 226.009989][ T7956] ? __pfx_vcpu_run+0x10/0x10 [ 226.010005][ T7956] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 226.010067][ T7956] ? rcu_is_watching+0x15/0xb0 [ 226.010104][ T7956] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 226.010150][ T7956] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 226.010170][ T7956] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 226.010189][ T7956] ? register_lock_class+0x31/0x2e0 [ 226.010212][ T7956] ? __lock_acquire+0x6b5/0x2cf0 [ 226.010237][ T7956] ? kasan_quarantine_put+0xbb/0x1f0 [ 226.010258][ T7956] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 226.010279][ T7956] ? do_raw_write_lock+0x11d/0x260 [ 226.010307][ T7956] kvm_vcpu_ioctl+0xa62/0xfd0 [ 226.010328][ T7956] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 226.010341][ T7956] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 226.010381][ T7956] ? __fget_files+0x2a/0x420 [ 226.010405][ T7956] ? __fget_files+0x2a/0x420 [ 226.010425][ T7956] ? __fget_files+0x3a0/0x420 [ 226.010446][ T7956] ? __fget_files+0x2a/0x420 [ 226.010470][ T7956] ? bpf_lsm_file_ioctl+0x9/0x20 [ 226.010489][ T7956] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 226.010504][ T7956] __se_sys_ioctl+0xfc/0x170 [ 226.010523][ T7956] do_syscall_64+0x14d/0xf80 [ 226.010546][ T7956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.010574][ T7956] ? clear_bhb_loop+0x40/0x90 [ 226.010592][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.010607][ T7956] RIP: 0033:0x7f5d8db9c629 [ 226.010622][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.010653][ T7956] RSP: 002b:00007f5d8e978028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.010670][ T7956] RAX: ffffffffffffffda RBX: 00007f5d8de15fa0 RCX: 00007f5d8db9c629 [ 226.010681][ T7956] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 226.010691][ T7956] RBP: 00007f5d8e978090 R08: 0000000000000000 R09: 0000000000000000 [ 226.010700][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.010708][ T7956] R13: 00007f5d8de16038 R14: 00007f5d8de15fa0 R15: 00007f5d8df3fa48 [ 226.010732][ T7956] [ 226.589980][ T796] gspca_zc3xx: reg_r err -110 [ 226.594939][ T796] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 226.887239][ T30] audit: type=1326 audit(1772043683.954:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56999c629 code=0x7ffc0000 [ 226.938209][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.378'. [ 227.027300][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 227.027903][ T5947] usb 2-1: USB disconnect, device number 20 [ 227.356360][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 227.624343][ T5947] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 227.794491][ T5947] usb 2-1: device descriptor read/64, error -71 [ 228.065203][ T5947] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 228.254794][ T5947] usb 2-1: device descriptor read/64, error -71 [ 228.385793][ T5947] usb usb2-port1: attempt power cycle [ 228.761626][ T5947] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 228.816026][ T5947] usb 2-1: device descriptor read/8, error -71 [ 229.065424][ T5947] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 229.106220][ T5947] usb 2-1: device descriptor read/8, error -71 [ 229.236957][ T5947] usb usb2-port1: unable to enumerate USB device [ 230.477954][ T5901] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 230.644344][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 230.653741][ T5901] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 230.674834][ T5901] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 230.698934][ T5901] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 230.727905][ T5901] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 230.766870][ T5901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 230.797912][ T5901] usb 1-1: config 0 has no interface number 0 [ 230.814935][ T5901] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 230.839869][ T5901] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 230.861767][ T5901] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 230.872285][ T5901] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.885927][ T5901] usb 1-1: config 0 interface 125 has no altsetting 0 [ 230.892832][ T5901] usb 1-1: config 0 interface 125 has no altsetting 2 [ 230.909628][ T5901] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 230.930370][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.948896][ T5901] usb 1-1: Product: syz [ 230.953356][ T5901] usb 1-1: Manufacturer: syz [ 230.985211][ T5901] usb 1-1: SerialNumber: syz [ 231.013555][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 231.149749][ T5901] usb 1-1: config 0 descriptor?? [ 231.192787][ T5901] usb 1-1: selecting invalid altsetting 2 [ 231.612959][ C1] usb 1-1: async_complete: urb error -32 [ 231.661663][ T5901] get_1284_register: usb error -32 [ 231.694479][ T5901] uss720 1-1:0.125: probe with driver uss720 failed with error -32 [ 231.702662][ T8033] netlink: 56 bytes leftover after parsing attributes in process `syz.1.396'. [ 232.100986][ T5901] usb 1-1: USB disconnect, device number 21 [ 232.463448][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 232.463466][ T30] audit: type=1326 audit(1772043689.524:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 232.566522][ T30] audit: type=1326 audit(1772043689.524:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 232.601171][ T30] audit: type=1326 audit(1772043689.564:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 232.627345][ T30] audit: type=1326 audit(1772043689.564:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 232.660005][ T30] audit: type=1326 audit(1772043689.564:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 232.695067][ T30] audit: type=1326 audit(1772043689.564:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 232.758195][ T30] audit: type=1326 audit(1772043689.564:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 232.784359][ T30] audit: type=1326 audit(1772043689.564:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 232.864357][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 232.876960][ T30] audit: type=1326 audit(1772043689.564:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 232.913784][ T8053] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 232.939563][ T30] audit: type=1326 audit(1772043689.564:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f819c629 code=0x7ffc0000 [ 233.055161][ T24] usb 4-1: no configurations [ 233.059853][ T24] usb 4-1: can't read configurations, error -22 [ 233.246174][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 233.446149][ T24] usb 4-1: no configurations [ 233.450984][ T24] usb 4-1: can't read configurations, error -22 [ 233.492754][ T24] usb usb4-port1: attempt power cycle [ 233.859164][ T8062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.885473][ T8061] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 233.894320][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 233.941062][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.960978][ T24] usb 4-1: no configurations [ 233.967263][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.977089][ T24] usb 4-1: can't read configurations, error -22 [ 234.134353][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 234.164405][ T10] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 234.187278][ T24] usb 4-1: no configurations [ 234.198054][ T24] usb 4-1: can't read configurations, error -22 [ 234.218425][ T24] usb usb4-port1: unable to enumerate USB device [ 234.328193][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.348570][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.366249][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 234.388084][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.427364][ T10] usb 2-1: config 0 descriptor?? [ 234.753893][ T8066] FAULT_INJECTION: forcing a failure. [ 234.753893][ T8066] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 234.771625][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.2.402 Not tainted syzkaller #0 PREEMPT(full) [ 234.771653][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.771667][ T8066] Call Trace: [ 234.771675][ T8066] [ 234.771685][ T8066] dump_stack_lvl+0xe8/0x150 [ 234.771723][ T8066] should_fail_ex+0x412/0x560 [ 234.771754][ T8066] prepare_alloc_pages+0x22a/0x650 [ 234.771790][ T8066] __alloc_frozen_pages_noprof+0x12f/0x380 [ 234.771821][ T8066] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.771854][ T8066] ? __pfx_policy_nodemask+0x10/0x10 [ 234.771878][ T8066] ? kasan_save_track+0x4f/0x80 [ 234.771898][ T8066] ? kasan_save_track+0x3e/0x80 [ 234.771917][ T8066] ? __kasan_kmalloc+0x93/0xb0 [ 234.771938][ T8066] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 234.771960][ T8066] ? __get_vm_area_node+0x13f/0x300 [ 234.771992][ T8066] ? __vmalloc_node_noprof+0xc2/0x100 [ 234.772011][ T8066] ? dup_task_struct+0x228/0x9a0 [ 234.772044][ T8066] ? copy_process+0x508/0x3cf0 [ 234.772071][ T8066] ? vhost_task_create+0x1f9/0x380 [ 234.772091][ T8066] ? kvm_mmu_post_init_vm+0x14c/0x300 [ 234.772120][ T8066] alloc_pages_mpol+0x232/0x4a0 [ 234.772153][ T8066] alloc_pages_noprof+0xa8/0x190 [ 234.772182][ T8066] get_free_pages_noprof+0xf/0x80 [ 234.772209][ T8066] __kasan_populate_vmalloc+0x38/0x1d0 [ 234.772242][ T8066] ? do_raw_spin_unlock+0xf5/0x210 [ 234.772270][ T8066] alloc_vmap_area+0xd73/0x14b0 [ 234.772333][ T8066] ? __pfx_alloc_vmap_area+0x10/0x10 [ 234.772364][ T8066] ? __kasan_kmalloc+0x93/0xb0 [ 234.772392][ T8066] ? __get_vm_area_node+0x13f/0x300 [ 234.772423][ T8066] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 234.772447][ T8066] ? copy_process+0x508/0x3cf0 [ 234.772475][ T8066] __get_vm_area_node+0x1f8/0x300 [ 234.772515][ T8066] __vmalloc_node_range_noprof+0x372/0x1730 [ 234.772538][ T8066] ? copy_process+0x508/0x3cf0 [ 234.772567][ T8066] ? refill_obj_stock+0x117/0x9b0 [ 234.772603][ T8066] ? percpu_ref_get_many+0x19/0x140 [ 234.772650][ T8066] ? __memcg_slab_post_alloc_hook+0x3df/0xa80 [ 234.772687][ T8066] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 234.772712][ T8066] ? rcu_is_watching+0x15/0xb0 [ 234.772744][ T8066] ? memcpy_and_pad+0x48/0x80 [ 234.772771][ T8066] __vmalloc_node_noprof+0xc2/0x100 [ 234.772792][ T8066] ? copy_process+0x508/0x3cf0 [ 234.772818][ T8066] ? copy_process+0x508/0x3cf0 [ 234.772850][ T8066] dup_task_struct+0x228/0x9a0 [ 234.772880][ T8066] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.772915][ T8066] copy_process+0x508/0x3cf0 [ 234.772972][ T8066] ? __pfx_copy_process+0x10/0x10 [ 234.773010][ T8066] ? mutex_init_lockep+0xf9/0x130 [ 234.773044][ T8066] vhost_task_create+0x1f9/0x380 [ 234.773067][ T8066] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 234.773100][ T8066] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 234.773138][ T8066] ? __pfx_vhost_task_create+0x10/0x10 [ 234.773169][ T8066] ? __pfx_vhost_task_fn+0x10/0x10 [ 234.773199][ T8066] ? __lock_acquire+0x6b5/0x2cf0 [ 234.773234][ T8066] kvm_mmu_post_init_vm+0x14c/0x300 [ 234.773262][ T8066] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 234.773297][ T8066] ? __mutex_trylock_common+0x158/0x260 [ 234.773339][ T8066] ? __pfx___mutex_trylock_common+0x10/0x10 [ 234.773372][ T8066] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 234.773398][ T8066] ? register_lock_class+0x31/0x2e0 [ 234.773428][ T8066] ? __lock_acquire+0x6b5/0x2cf0 [ 234.773464][ T8066] ? kasan_quarantine_put+0xbb/0x1f0 [ 234.773487][ T8066] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 234.773517][ T8066] ? do_raw_write_lock+0x11d/0x260 [ 234.773557][ T8066] kvm_vcpu_ioctl+0xa62/0xfd0 [ 234.773585][ T8066] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 234.773604][ T8066] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 234.773659][ T8066] ? __fget_files+0x2a/0x420 [ 234.773695][ T8066] ? __fget_files+0x2a/0x420 [ 234.773723][ T8066] ? __fget_files+0x3a0/0x420 [ 234.773751][ T8066] ? __fget_files+0x2a/0x420 [ 234.773785][ T8066] ? bpf_lsm_file_ioctl+0x9/0x20 [ 234.773812][ T8066] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 234.773834][ T8066] __se_sys_ioctl+0xfc/0x170 [ 234.773860][ T8066] do_syscall_64+0x14d/0xf80 [ 234.773891][ T8066] ? trace_irq_disable+0x3b/0x150 [ 234.773921][ T8066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.773943][ T8066] ? clear_bhb_loop+0x40/0x90 [ 234.773970][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.773992][ T8066] RIP: 0033:0x7f5d8db9c629 [ 234.774012][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.774030][ T8066] RSP: 002b:00007f5d8e978028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.774053][ T8066] RAX: ffffffffffffffda RBX: 00007f5d8de15fa0 RCX: 00007f5d8db9c629 [ 234.774069][ T8066] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 234.774082][ T8066] RBP: 00007f5d8e978090 R08: 0000000000000000 R09: 0000000000000000 [ 234.774095][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.774107][ T8066] R13: 00007f5d8de16038 R14: 00007f5d8de15fa0 R15: 00007f5d8df3fa48 [ 234.774142][ T8066] [ 235.267809][ T8066] syz.2.402: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 235.282919][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.2.402 Not tainted syzkaller #0 PREEMPT(full) [ 235.282949][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.282964][ T8066] Call Trace: [ 235.282972][ T8066] [ 235.282980][ T8066] dump_stack_lvl+0xe8/0x150 [ 235.283018][ T8066] warn_alloc+0x249/0x340 [ 235.283036][ T8066] ? kasan_quarantine_put+0xbb/0x1f0 [ 235.283055][ T8066] ? __pfx_warn_alloc+0x10/0x10 [ 235.283086][ T8066] ? __get_vm_area_node+0x211/0x300 [ 235.283118][ T8066] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 235.283141][ T8066] ? copy_process+0x508/0x3cf0 [ 235.283173][ T8066] ? __get_vm_area_node+0x211/0x300 [ 235.283201][ T8066] __vmalloc_node_range_noprof+0x397/0x1730 [ 235.283216][ T8066] ? refill_obj_stock+0x117/0x9b0 [ 235.283295][ T8066] ? percpu_ref_get_many+0x19/0x140 [ 235.283338][ T8066] ? __memcg_slab_post_alloc_hook+0x3df/0xa80 [ 235.283365][ T8066] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.283398][ T8066] ? rcu_is_watching+0x15/0xb0 [ 235.283431][ T8066] ? memcpy_and_pad+0x48/0x80 [ 235.283456][ T8066] __vmalloc_node_noprof+0xc2/0x100 [ 235.283476][ T8066] ? copy_process+0x508/0x3cf0 [ 235.283581][ T8066] ? copy_process+0x508/0x3cf0 [ 235.283615][ T8066] dup_task_struct+0x228/0x9a0 [ 235.283646][ T8066] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.283683][ T8066] copy_process+0x508/0x3cf0 [ 235.283756][ T8066] ? __pfx_copy_process+0x10/0x10 [ 235.283794][ T8066] ? mutex_init_lockep+0xf9/0x130 [ 235.283829][ T8066] vhost_task_create+0x1f9/0x380 [ 235.283846][ T8066] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 235.283872][ T8066] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 235.283919][ T8066] ? __pfx_vhost_task_create+0x10/0x10 [ 235.283948][ T8066] ? __pfx_vhost_task_fn+0x10/0x10 [ 235.283980][ T8066] ? __lock_acquire+0x6b5/0x2cf0 [ 235.284005][ T8066] kvm_mmu_post_init_vm+0x14c/0x300 [ 235.284025][ T8066] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 235.284070][ T8066] ? __mutex_trylock_common+0x158/0x260 [ 235.284105][ T8066] ? __pfx___mutex_trylock_common+0x10/0x10 [ 235.284138][ T8066] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 235.284156][ T8066] ? register_lock_class+0x31/0x2e0 [ 235.284194][ T8066] ? __lock_acquire+0x6b5/0x2cf0 [ 235.284235][ T8066] ? kasan_quarantine_put+0xbb/0x1f0 [ 235.284267][ T8066] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 235.284295][ T8066] ? do_raw_write_lock+0x11d/0x260 [ 235.284331][ T8066] kvm_vcpu_ioctl+0xa62/0xfd0 [ 235.284359][ T8066] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 235.284378][ T8066] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 235.284434][ T8066] ? __fget_files+0x2a/0x420 [ 235.284466][ T8066] ? __fget_files+0x2a/0x420 [ 235.284497][ T8066] ? __fget_files+0x3a0/0x420 [ 235.284519][ T8066] ? __fget_files+0x2a/0x420 [ 235.284564][ T8066] ? bpf_lsm_file_ioctl+0x9/0x20 [ 235.284591][ T8066] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 235.284612][ T8066] __se_sys_ioctl+0xfc/0x170 [ 235.284638][ T8066] do_syscall_64+0x14d/0xf80 [ 235.284662][ T8066] ? trace_irq_disable+0x3b/0x150 [ 235.284695][ T8066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.284719][ T8066] ? clear_bhb_loop+0x40/0x90 [ 235.284745][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.284766][ T8066] RIP: 0033:0x7f5d8db9c629 [ 235.284790][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.284804][ T8066] RSP: 002b:00007f5d8e978028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.284821][ T8066] RAX: ffffffffffffffda RBX: 00007f5d8de15fa0 RCX: 00007f5d8db9c629 [ 235.284832][ T8066] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 235.284854][ T8066] RBP: 00007f5d8e978090 R08: 0000000000000000 R09: 0000000000000000 [ 235.284868][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.284880][ T8066] R13: 00007f5d8de16038 R14: 00007f5d8de15fa0 R15: 00007f5d8df3fa48 [ 235.284913][ T8066] [ 235.342295][ T10] kye 0003:0458:5019.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 235.346940][ T8066] Mem-Info: [ 235.353308][ T10] kye 0003:0458:5019.0008: collection stack underflow [ 235.356851][ T8066] active_anon:8494 inactive_anon:0 isolated_anon:0 [ 235.356851][ T8066] active_file:13337 inactive_file:40028 isolated_file:0 [ 235.356851][ T8066] unevictable:768 dirty:129 writeback:0 [ 235.356851][ T8066] slab_reclaimable:10782 slab_unreclaimable:95798 [ 235.356851][ T8066] mapped:30592 shmem:3119 pagetables:1319 [ 235.356851][ T8066] sec_pagetables:1 bounce:0 [ 235.356851][ T8066] kernel_misc_reclaimable:0 [ 235.356851][ T8066] free:1316749 free_pcp:9354 free_cma:0 [ 235.356918][ T8066] Node 0 active_anon:33976kB inactive_anon:0kB active_file:53348kB inactive_file:159916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122368kB dirty:512kB writeback:0kB shmem:10940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12440kB pagetables:5144kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB [ 235.356974][ T8066] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 235.796107][ T8066] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.826079][ T8066] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 235.831866][ T8066] Node 0 DMA32 free:1308048kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33976kB inactive_anon:0kB active_file:53348kB inactive_file:159916kB unevictable:1536kB writepending:512kB zspages:0kB present:3129332kB managed:2552844kB mlocked:0kB bounce:0kB free_pcp:37740kB local_pcp:18428kB free_cma:0kB [ 235.865330][ T8066] lowmem_reserve[]: 0 0 0 0 0 [ 235.870102][ T8066] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 235.908465][ T8066] lowmem_reserve[]: 0 0 0 0 0 [ 235.913618][ T8066] Node 1 Normal free:3943588kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.976316][ T8066] lowmem_reserve[]: 0 0 0 0 0 [ 235.981606][ T8066] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 235.985017][ T10] kye 0003:0458:5019.0008: item 0 4 0 12 parsing failed [ 236.002343][ T8066] Node 0 DMA32: 1809*4kB (UM) 1851*8kB (UM) 1349*16kB (UME) 463*32kB (UME) 236*64kB (UME) 111*128kB (UM) 51*256kB (UME) 20*512kB (UM) 9*1024kB (UM) 2*2048kB (UM) 289*4096kB (UM) = 1308108kB [ 236.026023][ T8066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 236.053544][ T10] kye 0003:0458:5019.0008: parse failed [ 236.094939][ T10] kye 0003:0458:5019.0008: probe with driver kye failed with error -22 [ 236.096013][ T8066] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 16*16kB (UME) 9*32kB (UME) 9*64kB (UM) 4*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 961*4096kB (M) = 3943588kB [ 236.151629][ T8066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.162515][ T8066] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.175299][ T8066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.185980][ T8066] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.195883][ T8066] 56352 total pagecache pages [ 236.202021][ T8066] 0 pages in swap cache [ 236.210410][ T8066] Free swap = 124996kB [ 236.215063][ T8066] Total swap = 124996kB [ 236.219494][ T8066] 2097051 pages RAM [ 236.223708][ T8066] 0 pages HighMem/MovableOnly [ 236.241307][ T8066] 427004 pages reserved [ 236.246991][ T8066] 0 pages cma reserved [ 236.275416][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 236.867967][ T8085] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 236.932935][ T8081] bond0 (unregistering): Released all slaves [ 237.085664][ T8091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 237.124527][ T10] usb 2-1: USB disconnect, device number 25 [ 237.648797][ T8099] netlink: 56 bytes leftover after parsing attributes in process `syz.4.411'. [ 237.754337][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 237.924607][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 237.983185][ T10] usb 2-1: config 7 has an invalid interface number: 95 but max is 0 [ 238.000290][ T10] usb 2-1: config 7 has no interface number 0 [ 238.021072][ T10] usb 2-1: config 7 interface 95 has no altsetting 0 [ 238.074731][ T10] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=16.18 [ 238.091136][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.099584][ T10] usb 2-1: Product: щ [ 238.109603][ T10] usb 2-1: Manufacturer: 쭡᪒飑ྠ즟꟨䷟镀鯅ﶎ⺼ै婧Ԧ㔮쓛㱹͕漒樰䇯ᄖ⧅䴇呧槷枳಄䉼Ử螞촱艭긱ｯ짽뽹棉Ꭶ更重艏 [ 238.125033][ T10] usb 2-1: SerialNumber: 䰊 [ 238.362852][ T10] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 238.384051][ T10] cxusb: set interface failed [ 238.390852][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 238.434552][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 238.462205][ T10] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 238.502568][ T10] usb 2-1: media controller created [ 238.514508][ T5901] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 238.559753][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.716456][ T5901] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 238.749001][ T5901] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 238.784934][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.824343][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 238.914864][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 238.922273][ T10] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 238.942833][ T5901] usb 3-1: config 1 has no interface number 0 [ 238.961937][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 238.970017][ T10] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 238.974490][ T5901] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 239.031786][ T10] usb 2-1: USB disconnect, device number 26 [ 239.068164][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.204631][ T5901] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 239.223289][ T10] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 239.349766][ T5901] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 239.377082][ T5901] snd_usb_pod 3-1:1.1: invalid control EP [ 239.403284][ T5901] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 239.423724][ T5901] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 239.444870][ T5901] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 239.486792][ T8114] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 239.588686][ T10] usb 3-1: USB disconnect, device number 20 [ 240.347301][ T8129] FAULT_INJECTION: forcing a failure. [ 240.347301][ T8129] name failslab, interval 1, probability 0, space 0, times 0 [ 240.396208][ T8129] CPU: 1 UID: 0 PID: 8129 Comm: syz.2.420 Not tainted syzkaller #0 PREEMPT(full) [ 240.396247][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.396259][ T8129] Call Trace: [ 240.396267][ T8129] [ 240.396274][ T8129] dump_stack_lvl+0xe8/0x150 [ 240.396307][ T8129] should_fail_ex+0x412/0x560 [ 240.396335][ T8129] should_failslab+0xa8/0x100 [ 240.396357][ T8129] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 240.396386][ T8129] kmem_cache_alloc_noprof+0x87/0x650 [ 240.396415][ T8129] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 240.396442][ T8129] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 240.396475][ T8129] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 240.396514][ T8129] mmu_topup_memory_caches+0x21/0x170 [ 240.396544][ T8129] kvm_mmu_load+0x9d/0x22d0 [ 240.396591][ T8129] ? kvm_msr_allowed+0x3f4/0x490 [ 240.396611][ T8129] ? kvm_msr_allowed+0x9a/0x490 [ 240.396642][ T8129] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 240.396664][ T8129] ? kvm_apic_has_interrupt+0x73c/0x770 [ 240.396698][ T8129] vcpu_run+0x5faf/0x7b90 [ 240.396798][ T8129] ? __pfx_vcpu_run+0x10/0x10 [ 240.396819][ T8129] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 240.396852][ T8129] ? rcu_is_watching+0x15/0xb0 [ 240.396886][ T8129] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 240.396925][ T8129] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 240.396950][ T8129] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 240.396980][ T8129] ? register_lock_class+0x31/0x2e0 [ 240.397011][ T8129] ? __lock_acquire+0x6b5/0x2cf0 [ 240.397044][ T8129] ? kasan_quarantine_put+0xbb/0x1f0 [ 240.397067][ T8129] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 240.397095][ T8129] ? do_raw_write_lock+0x11d/0x260 [ 240.397133][ T8129] kvm_vcpu_ioctl+0xa62/0xfd0 [ 240.397160][ T8129] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 240.397178][ T8129] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 240.397231][ T8129] ? __fget_files+0x2a/0x420 [ 240.397265][ T8129] ? __fget_files+0x2a/0x420 [ 240.397292][ T8129] ? __fget_files+0x3a0/0x420 [ 240.397321][ T8129] ? __fget_files+0x2a/0x420 [ 240.397353][ T8129] ? bpf_lsm_file_ioctl+0x9/0x20 [ 240.397379][ T8129] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 240.397400][ T8129] __se_sys_ioctl+0xfc/0x170 [ 240.397426][ T8129] do_syscall_64+0x14d/0xf80 [ 240.397456][ T8129] ? trace_irq_disable+0x3b/0x150 [ 240.397484][ T8129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.397506][ T8129] ? clear_bhb_loop+0x40/0x90 [ 240.397531][ T8129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.397552][ T8129] RIP: 0033:0x7f5d8db9c629 [ 240.397571][ T8129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.397589][ T8129] RSP: 002b:00007f5d8e978028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.397611][ T8129] RAX: ffffffffffffffda RBX: 00007f5d8de15fa0 RCX: 00007f5d8db9c629 [ 240.397627][ T8129] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 240.397640][ T8129] RBP: 00007f5d8e978090 R08: 0000000000000000 R09: 0000000000000000 [ 240.397652][ T8129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.397664][ T8129] R13: 00007f5d8de16038 R14: 00007f5d8de15fa0 R15: 00007f5d8df3fa48 [ 240.397697][ T8129] [ 241.003989][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.421'. [ 241.823560][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 241.846817][ T8153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 242.984415][ T8164] netlink: 56 bytes leftover after parsing attributes in process `syz.3.427'. [ 243.722090][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 243.793329][ T8178] Invalid argument reading file caps for ./file0 [ 243.917943][ T8181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.431'. [ 245.392822][ T8189] x_tables: duplicate underflow at hook 1 [ 245.695889][ T8207] netlink: 52 bytes leftover after parsing attributes in process `syz.3.438'. [ 245.807559][ T8210] bond1 (unregistering): Released all slaves [ 246.291458][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 246.291478][ T30] audit: type=1326 audit(1772043703.354:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 246.336384][ T30] audit: type=1326 audit(1772043703.354:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 246.365528][ T30] audit: type=1326 audit(1772043703.404:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 246.475940][ T30] audit: type=1326 audit(1772043703.404:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 246.663092][ T30] audit: type=1326 audit(1772043703.434:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 246.758798][ T30] audit: type=1326 audit(1772043703.464:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 246.852529][ T30] audit: type=1326 audit(1772043703.464:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 246.924710][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 246.953080][ T30] audit: type=1326 audit(1772043703.474:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 247.024376][ T30] audit: type=1326 audit(1772043703.474:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 247.108337][ T30] audit: type=1326 audit(1772043703.474:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8db9c629 code=0x7ffc0000 [ 247.135300][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.443'. [ 247.155242][ T10] usb 3-1: no configurations [ 247.159894][ T10] usb 3-1: can't read configurations, error -22 [ 247.354676][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 247.399410][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 247.487392][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 247.559719][ T8216] netlink: 1 bytes leftover after parsing attributes in process `syz.1.440'. [ 247.598792][ T10] usb 3-1: no configurations [ 247.616077][ T10] usb 3-1: can't read configurations, error -22 [ 247.654783][ T10] usb usb3-port1: attempt power cycle [ 247.877342][ T8238] netlink: 56 bytes leftover after parsing attributes in process `syz.4.445'. [ 248.026274][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 248.083329][ T10] usb 3-1: no configurations [ 248.096586][ T10] usb 3-1: can't read configurations, error -22 [ 248.245275][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 248.313232][ T10] usb 3-1: no configurations [ 248.344494][ T10] usb 3-1: can't read configurations, error -22 [ 358.195905][ C0] ------------[ cut here ]------------ [ 358.202087][ C0] 1 [ 358.202117][ C0] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall+0x2e4/0x470, CPU#0: syz.4.445/8236 [ 358.215711][ C0] Modules linked in: [ 358.220071][ C0] CPU: 0 UID: 0 PID: 8236 Comm: syz.4.445 Not tainted syzkaller #0 PREEMPT(full) [ 358.229300][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.239390][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 358.245764][ C0] Code: ff ff 48 c7 c7 c0 25 2b 9a be 04 00 00 00 e8 d3 7c 84 00 4c 89 f7 b8 01 00 00 00 87 05 15 ef 7f 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 5e 76 8e 74 47 48 c7 c0 c0 b0 11 90 48 c1 e8 [ 358.265413][ C0] RSP: 0018:ffffc90000007db8 EFLAGS: 00010046 [ 358.271520][ C0] RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81ab369d [ 358.279530][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e765e00 [ 358.287698][ C0] RBP: ffffc90000007f28 R08: 0000000000000003 R09: 0000000000000004 [ 358.295721][ C0] R10: dffffc0000000000 R11: fffffbfff34564b8 R12: 0000000000002904 [ 358.303893][ C0] R13: dffffc0000000000 R14: ffffffff8e765e00 R15: dffffc0000000000 [ 358.311894][ C0] FS: 00007fc56a9206c0(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 358.320855][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.327492][ C0] CR2: 000020000008f030 CR3: 000000007a60e000 CR4: 00000000003526f0 [ 358.335672][ C0] Call Trace: [ 358.338989][ C0] [ 358.341864][ C0] rcu_core+0x3fe/0x1070 [ 358.346259][ C0] ? sched_balance_domains+0x13a/0x950 [ 358.351785][ C0] ? sched_balance_domains+0x82d/0x950 [ 358.357314][ C0] ? __pfx_rcu_core+0x10/0x10 [ 358.362049][ C0] ? sched_balance_domains+0x13a/0x950 [ 358.367579][ C0] handle_softirqs+0x22a/0x870 [ 358.372396][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 358.377213][ C0] __irq_exit_rcu+0x5f/0x150 [ 358.381844][ C0] irq_exit_rcu+0x9/0x30 [ 358.386115][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 358.391784][ C0] [ 358.394735][ C0] [ 358.397689][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.403874][ C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 358.410586][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 74 e2 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 1f de 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 03 de [ 358.430243][ C0] RSP: 0018:ffffc900052770e0 EFLAGS: 00000246 [ 358.436344][ C0] RAX: ffffffff81b9ad7d RBX: 1ffff110170e812d RCX: 0000000000080000 [ 358.444349][ C0] RDX: ffffc9000e505000 RSI: 000000000007ffff RDI: 0000000000080000 [ 358.452367][ C0] RBP: ffffc90005277210 R08: ffffffff90117db7 R09: 1ffffffff2022fb6 [ 358.460375][ C0] R10: dffffc0000000000 R11: fffffbfff2022fb7 R12: ffff8880b8740968 [ 358.468379][ C0] R13: dffffc0000000000 R14: ffff8880b863bf80 R15: 0000000000000001 [ 358.476404][ C0] ? smp_call_function_many_cond+0xcfd/0x12c0 [ 358.482518][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 358.487929][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 358.493170][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 358.499525][ C0] ? rcu_is_watching+0x15/0xb0 [ 358.504330][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 358.509733][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 358.515044][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 358.520188][ C0] flush_tlb_mm_range+0x5c3/0x10c0 [ 358.525336][ C0] ? page_table_check_clear+0x4b8/0x5f0 [ 358.530921][ C0] ptep_clear_flush+0x120/0x170 [ 358.535810][ C0] do_wp_page+0x4129/0x5a00 [ 358.540358][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 358.545339][ C0] ? do_wp_page+0x3b9f/0x5a00 [ 358.550064][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 358.554947][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.559997][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.565402][ C0] handle_mm_fault+0x1520/0x3310 [ 358.570409][ C0] ? handle_mm_fault+0xee/0x3310 [ 358.575385][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 358.580723][ C0] ? lock_mm_and_find_vma+0xa7/0x340 [ 358.586037][ C0] do_user_addr_fault+0x75b/0x1340 [ 358.591199][ C0] exc_page_fault+0x6a/0xc0 [ 358.595740][ C0] asm_exc_page_fault+0x26/0x30 [ 358.600636][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 358.606426][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d1 75 03 00 90 90 90 90 90 90 90 90 90 90 [ 358.626087][ C0] RSP: 0018:ffffc900052778b8 EFLAGS: 00050202 [ 358.632208][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000008f030 [ 358.640207][ C0] RDX: ffff88807b451e40 RSI: 0000000000000002 RDI: 00000000ffffffff [ 358.648207][ C0] RBP: ffffc90005277a30 R08: ffffc90005277687 R09: 1ffff92000a4eed0 [ 358.656212][ C0] R10: dffffc0000000000 R11: fffff52000a4eed1 R12: 1ffff92000a4ef24 [ 358.664210][ C0] R13: 0000000000000002 R14: 000020000008f000 R15: dffffc0000000000 [ 358.672270][ C0] ____sys_recvmsg+0x2be/0x4a0 [ 358.677120][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 358.682458][ C0] ? import_iovec+0x73/0xa0 [ 358.686993][ C0] ___sys_recvmsg+0x215/0x590 [ 358.691704][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 358.696684][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 358.701918][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 358.707198][ C0] do_recvmmsg+0x334/0x800 [ 358.711662][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 358.716677][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 358.721753][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 358.727348][ C0] do_syscall_64+0x14d/0xf80 [ 358.732016][ C0] ? trace_irq_disable+0x3b/0x150 [ 358.737081][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.743180][ C0] ? clear_bhb_loop+0x40/0x90 [ 358.747899][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.753822][ C0] RIP: 0033:0x7fc56999c629 [ 358.758268][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.777894][ C0] RSP: 002b:00007fc56a920028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 358.786338][ C0] RAX: ffffffffffffffda RBX: 00007fc569c16090 RCX: 00007fc56999c629 [ 358.794334][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 358.802332][ C0] RBP: 00007fc569a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 358.810321][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 358.818314][ C0] R13: 00007fc569c16128 R14: 00007fc569c16090 R15: 00007fc569d3fa48 [ 358.826323][ C0] [ 358.829362][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.836661][ C0] CPU: 0 UID: 0 PID: 8236 Comm: syz.4.445 Not tainted syzkaller #0 PREEMPT(full) [ 358.845899][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.855972][ C0] Call Trace: [ 358.859278][ C0] [ 358.862140][ C0] vpanic+0x56c/0xa60 [ 358.866161][ C0] ? __pfx__printk+0x10/0x10 [ 358.870781][ C0] ? __pfx_vpanic+0x10/0x10 [ 358.875322][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 358.880637][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 358.885893][ C0] panic+0xc5/0xd0 [ 358.889654][ C0] ? __pfx_panic+0x10/0x10 [ 358.894142][ C0] __warn+0x315/0x4f0 [ 358.898243][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 358.903989][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 358.909740][ C0] __report_bug+0x29a/0x540 [ 358.914292][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 358.920040][ C0] ? __pfx___report_bug+0x10/0x10 [ 358.925121][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 358.930105][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 358.935855][ C0] report_bug+0x16a/0x220 [ 358.940221][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 358.945973][ C0] ? rcu_check_gp_start_stall+0x2e6/0x470 [ 358.951726][ C0] handle_bug+0x98/0x200 [ 358.956013][ C0] exc_invalid_op+0x1a/0x50 [ 358.960566][ C0] asm_exc_invalid_op+0x1a/0x20 [ 358.965527][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 358.971898][ C0] Code: ff ff 48 c7 c7 c0 25 2b 9a be 04 00 00 00 e8 d3 7c 84 00 4c 89 f7 b8 01 00 00 00 87 05 15 ef 7f 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 5e 76 8e 74 47 48 c7 c0 c0 b0 11 90 48 c1 e8 [ 358.991524][ C0] RSP: 0018:ffffc90000007db8 EFLAGS: 00010046 [ 358.997623][ C0] RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81ab369d [ 359.005629][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e765e00 [ 359.013622][ C0] RBP: ffffc90000007f28 R08: 0000000000000003 R09: 0000000000000004 [ 359.021609][ C0] R10: dffffc0000000000 R11: fffffbfff34564b8 R12: 0000000000002904 [ 359.029601][ C0] R13: dffffc0000000000 R14: ffffffff8e765e00 R15: dffffc0000000000 [ 359.037607][ C0] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 359.043363][ C0] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 359.049119][ C0] rcu_core+0x3fe/0x1070 [ 359.053410][ C0] ? sched_balance_domains+0x13a/0x950 [ 359.058901][ C0] ? sched_balance_domains+0x82d/0x950 [ 359.064394][ C0] ? __pfx_rcu_core+0x10/0x10 [ 359.069115][ C0] ? sched_balance_domains+0x13a/0x950 [ 359.074609][ C0] handle_softirqs+0x22a/0x870 [ 359.079409][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 359.084224][ C0] __irq_exit_rcu+0x5f/0x150 [ 359.088868][ C0] irq_exit_rcu+0x9/0x30 [ 359.093139][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 359.098802][ C0] [ 359.101752][ C0] [ 359.104709][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.110715][ C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 359.117415][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 74 e2 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 1f de 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 03 de [ 359.137135][ C0] RSP: 0018:ffffc900052770e0 EFLAGS: 00000246 [ 359.143234][ C0] RAX: ffffffff81b9ad7d RBX: 1ffff110170e812d RCX: 0000000000080000 [ 359.151223][ C0] RDX: ffffc9000e505000 RSI: 000000000007ffff RDI: 0000000000080000 [ 359.159218][ C0] RBP: ffffc90005277210 R08: ffffffff90117db7 R09: 1ffffffff2022fb6 [ 359.167212][ C0] R10: dffffc0000000000 R11: fffffbfff2022fb7 R12: ffff8880b8740968 [ 359.175213][ C0] R13: dffffc0000000000 R14: ffff8880b863bf80 R15: 0000000000000001 [ 359.183243][ C0] ? smp_call_function_many_cond+0xcfd/0x12c0 [ 359.189350][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 359.194753][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 359.199995][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 359.206361][ C0] ? rcu_is_watching+0x15/0xb0 [ 359.211153][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 359.216547][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 359.221764][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 359.226896][ C0] flush_tlb_mm_range+0x5c3/0x10c0 [ 359.232039][ C0] ? page_table_check_clear+0x4b8/0x5f0 [ 359.237644][ C0] ptep_clear_flush+0x120/0x170 [ 359.242534][ C0] do_wp_page+0x4129/0x5a00 [ 359.247089][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 359.252090][ C0] ? do_wp_page+0x3b9f/0x5a00 [ 359.256809][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 359.261687][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 359.266742][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 359.272149][ C0] handle_mm_fault+0x1520/0x3310 [ 359.277157][ C0] ? handle_mm_fault+0xee/0x3310 [ 359.282146][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 359.287498][ C0] ? lock_mm_and_find_vma+0xa7/0x340 [ 359.292821][ C0] do_user_addr_fault+0x75b/0x1340 [ 359.297984][ C0] exc_page_fault+0x6a/0xc0 [ 359.302528][ C0] asm_exc_page_fault+0x26/0x30 [ 359.307399][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 359.313151][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d1 75 03 00 90 90 90 90 90 90 90 90 90 90 [ 359.332797][ C0] RSP: 0018:ffffc900052778b8 EFLAGS: 00050202 [ 359.338981][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000008f030 [ 359.346982][ C0] RDX: ffff88807b451e40 RSI: 0000000000000002 RDI: 00000000ffffffff [ 359.354976][ C0] RBP: ffffc90005277a30 R08: ffffc90005277687 R09: 1ffff92000a4eed0 [ 359.362982][ C0] R10: dffffc0000000000 R11: fffff52000a4eed1 R12: 1ffff92000a4ef24 [ 359.371020][ C0] R13: 0000000000000002 R14: 000020000008f000 R15: dffffc0000000000 [ 359.379068][ C0] ____sys_recvmsg+0x2be/0x4a0 [ 359.383894][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 359.389237][ C0] ? import_iovec+0x73/0xa0 [ 359.393780][ C0] ___sys_recvmsg+0x215/0x590 [ 359.398491][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 359.403481][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 359.408723][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 359.414002][ C0] do_recvmmsg+0x334/0x800 [ 359.418467][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 359.423472][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 359.428537][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 359.434127][ C0] do_syscall_64+0x14d/0xf80 [ 359.438757][ C0] ? trace_irq_disable+0x3b/0x150 [ 359.443823][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.449920][ C0] ? clear_bhb_loop+0x40/0x90 [ 359.454629][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.460553][ C0] RIP: 0033:0x7fc56999c629 [ 359.465014][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.484654][ C0] RSP: 002b:00007fc56a920028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 359.493101][ C0] RAX: ffffffffffffffda RBX: 00007fc569c16090 RCX: 00007fc56999c629 [ 359.501097][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 359.509274][ C0] RBP: 00007fc569a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 359.517447][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 359.525527][ C0] R13: 00007fc569c16128 R14: 00007fc569c16090 R15: 00007fc569d3fa48 [ 359.533547][ C0] [ 360.710848][ C0] Shutting down cpus with NMI [ 360.716194][ C0] Kernel Offset: disabled [ 360.720527][ C0] Rebooting in 86400 seconds..