last executing test programs: 10.847344157s ago: executing program 4 (id=1406): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000800)=""/104, 0x68}, {&(0x7f0000000880)=""/57, 0x39}, {&(0x7f00000008c0)=""/129, 0x81}, {0x0}, {0x0}, {&(0x7f0000001d80)=""/169, 0xa9}, {&(0x7f0000001e40)=""/239, 0xef}], 0x8, &(0x7f0000001f40)=""/54, 0x36}, 0x6}], 0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002000)=ANY=[@ANYRES16=r2], 0xfc}}, 0x8000) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x82) fchdir(r5) ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000002100), 0x50400, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2d) socket(0x2b, 0x1, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000002380)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) write$UHID_INPUT(r6, &(0x7f0000000980)={0x8, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 8.860489718s ago: executing program 4 (id=1417): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc004080) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) memfd_create(0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x48) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r11, &(0x7f0000004900)={0x2020}, 0x2081) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.30787084s ago: executing program 4 (id=1419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0x0, 0x0, &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000d40)=0xfffffffffffffff7, 0x9) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e00)={0x0, &(0x7f0000000e40)=""/103, &(0x7f0000000ec0), &(0x7f0000000f00), 0x80, r0, 0x0, 0x7}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x8810) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000000b40)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x1, 0x143000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 7.655600289s ago: executing program 0 (id=1423): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/sockstat\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41000, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@cgroup=r2, r2, 0x2c}, 0x20) pread64(r1, &(0x7f0000000780)=""/102400, 0x19000, 0x80000000000000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000019780)={&(0x7f00000197c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000019800)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x22000814}, 0x8050) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019880)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000f3c000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000019900)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000019940)={0x1c, &(0x7f0000019980)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 7.626217365s ago: executing program 4 (id=1424): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/sockstat\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41000, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@cgroup=r2, r2, 0x2c}, 0x20) pread64(r1, &(0x7f0000000780)=""/102400, 0x19000, 0x80000000000000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000019780)={&(0x7f00000197c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000019800)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x22000814}, 0x8050) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019880)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000f3c000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000019940)={0x1c, &(0x7f0000019980)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 6.751543s ago: executing program 4 (id=1428): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) syz_usb_connect(0x2, 0x37, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x3, 0xba, 0x63, 0x8, 0x499, 0x1009, 0x84fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25, 0x1, 0x2, 0x9, 0x30, 0x6, "", [{{0x9, 0x4, 0x66, 0xc, 0x0, 0xf5, 0x55, 0x53, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x8001, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x5, 0x4, 0xe}]}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x5f, &(0x7f0000000500)=@string={0x5f, 0x3, "9d21e9659303445369cbe096759144ff67ace862aac6add65fc2364d31ee5c029bf639bc5efcbf977d032838bea0471de272d79a4f6064ba4cbbd6ed60c82ba7f413c8cbd600941a19eb9047a5f36687cbd05f34711369fcd4eee9e3d6"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x100c}}, {0xb1, &(0x7f00000005c0)=@string={0xb1, 0x3, "b514beb2227a2ed6c7acc0f45066df96038e7883ca852026cb31ba44b58011b33194da9a8b7dd7331e000d56add68ee9123cc63cc87ffa69827b27f9dbd9f1c736084a4a48c5f7d9e5e08376bd9c6fba7c35d3ee5be8ea7343b15fa84b57bb7daf8a58d8cb5e84f64c7114039ec788ce4d8f849c10502aee1537b9f133901f3bd7179aa411d643e8601ae6f3d42d68c810182faf50990e62b0cdf877790a68670b51018fe7420c3ce2e4957ad03bb5"}}, {0xa5, &(0x7f0000000680)=@string={0xa5, 0x3, "5a24e8c6470ce70f942d4b1315c7139bb5199fdfb8bd2067e287b0c3b5e056c0fe30a3f645eabf55973d6615a5806165bf9b7b8dd6e5098f8d648d1c5cfb270f42d7dbbfb3d187cb098d88d24a3336101e53aa73e5ab5b9d55ed632216459000679975ae18dfcdaec2302cc7a783edeadabb4942b074879f7cf1c580ff166ba30f517af18f1fa3d2212126440249d63bdb0f3611a39db9b45822cdacfda6f88b006784"}}, {0x5a, &(0x7f0000000e80)=@string={0x5a, 0x3, "6ba8c8a1bd5c25e1a5844fc2b137e42b52b3b91e24f9be87a4e4a808e6bf74fd443a1bd8486cf9287069edc1894e1d4f53abc95fdcca79aea71b36819f5a0e028a864b414ad839c17bfe7d7f44a5fc42e1451159753b90f9"}}, {0x6a, &(0x7f0000000a80)=@string={0x6a, 0x3, "5221a4262233548e230ab25434ea573e0647f2e519fb31809c381c653880b1faea610fa43347e2afee26d528d91f65646995e64c49409a6d2b23d668d7bf9405c948ae3995f0726ae542dfde3045b1722b9b543b8a4af35c929ba8f367d55c77769575f9912d9c67"}}, {0x40, &(0x7f0000000b00)=@string={0x40, 0x3, "529247ffb0aa8b091e84b4f473549415c875d4fe28a3d5335e5a3b4013bc92b235a255c0c6da829219aec04b9d93d1b7f7e73c929da187d6436c9b343291"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x447}}, {0xcd, &(0x7f0000000b80)=@string={0xcd, 0x3, "691f68ba9a1484e0253e7e4ea1aeb65821ef7a1c0e26eb78827e714eb306623d5678405da0100bde6b8f5e119675d846c2ee5314e68a1dfb33ec2cad3ffec1a950bdc3f72d4c0e82c1bb581a052e3e4cf79c19c7d292a43bcee0ad1da6c44ded650ed3d98bc308667f31d991c4c91937fc3ed74a0eaa4e4bbd7737b3e1090db6c309a8c9ffc6f00f28b0afb15add252e211de3e9bf452254f567f3243198acd9a2d113319a9a5ce0d0094bf7f9d832d6bc0760316231c1b565e11487e69fe8a76556595248cfd6a86a2ceb"}}]}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2a, 0x2, 0x1) 6.120442531s ago: executing program 2 (id=1431): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473001a00028005db010003000000", 0x38) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) 5.930117626s ago: executing program 2 (id=1432): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4ba}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.340903795s ago: executing program 3 (id=1434): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="680000001000370406000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0088000000000000340012800900010069706970000000002400028008000300ac1eff010800140001000000050005000300000005000900040000001400030074756e6c30"], 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) write$FUSE_STATX(0xffffffffffffffff, 0x0, 0x0) mount$fuseblk(&(0x7f0000000400), &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x2002824, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7ff}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8000000000000001}}], [{@subj_role}, {@pcr={'pcr', 0x3d, 0x1b}}, {@fsmagic={'fsmagic', 0x3d, 0xe4}}, {@smackfsfloor}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x64, 0x38, 0x32, 0x33, 0x65, 0x66, 0x64], 0x2d, [0x36, 0x64, 0x33, 0x30], 0x2d, [0x30, 0x37, 0x65, 0x38], 0x2d, [0x34, 0x65, 0x31, 0x63], 0x2d, [0x34, 0x35, 0x39, 0x32, 0x39, 0x64, 0x37, 0x61]}}}, {@appraise}, {@hash}]}}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/unix\x00') lseek(r6, 0x38, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000380)=0x1e, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000880)={0x1d, r12, 0x1, {0x176e19c8f85d2a1e, 0xf0, 0x6}, 0x2}, 0x18) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000900)={0x1d, r14, 0x1, {0x1, 0xf0, 0x1}, 0xff}, 0x18) bind$can_j1939(r13, &(0x7f0000000940)={0x1d, r12, 0x2, {0x1, 0xf0, 0x3}, 0xff}, 0x18) 4.772829094s ago: executing program 0 (id=1435): getsockopt(0xffffffffffffffff, 0x36ad, 0x800, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000640)={0x2, 0x15, @loopback}, 0x10) write(r1, &(0x7f0000000680)='PASV\r\n', 0x6) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000800)='227 Entering Passive M', 0x16) 4.688352562s ago: executing program 2 (id=1436): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'bridge0\x00', 0x1}, 0x18) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) 4.310684687s ago: executing program 0 (id=1437): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000007c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\a'], 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x40011) 4.213520715s ago: executing program 2 (id=1438): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000002d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002d40)=0x14) sendmsg$nl_route(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002e00)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002ec0)=@ipv4_newaddr={0x20, 0x14, 0x101, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000002f00)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000003000)=ANY=[@ANYBLOB="40000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100736974000c00028008000300e000000108000a00", @ANYRES32=r2, @ANYBLOB="1ac278f1b3bbac7a1fdb3496fee846198da91f3c55491b2a7683956400c0dd1a44a3eb9d38b3664b5e2ddd11d549ed49e074b4b7056db61f270ca9b026386a22199d542c08b57402beffb87fb0964d58e0da03af5091f6688be23564a3711056301f9643ddcfa996b91f1b217b7f4b829c4d4180078222797141928b863b0ef9bb10089dc9e08711"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000140)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1adc00) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000a40)={0xffbffffa, 0x3, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000b00)={0x0, 0x722}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000bc0)={0x2020}, 0x2020) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000900)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r9, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000009c0)={0x0, 0x101, 0x2, 0x7}, &(0x7f0000000a00)=0x10) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000840)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.203939341s ago: executing program 1 (id=1439): fsopen(&(0x7f00000014c0)='proc\x00', 0x0) unshare(0x22020600) r0 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010ac054b0240000102030109022400010108020609210400f30122b60a090581034000034004000000000000000000"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 4.024249419s ago: executing program 0 (id=1440): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000", @ANYRES32=r7], 0x48) 3.841042802s ago: executing program 0 (id=1441): ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r4, 0x0, 0x8000039042, 0x0) r5 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x0) splice(r3, 0x0, r5, 0x0, 0x2, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x12, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x103e2}, &(0x7f0000000300)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x6b09, 0x1a5f, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001400030500008000ffdbdf25020051ff", @ANYRES32=r13, @ANYBLOB="080002007f00000108000400ac1e010153c447"], 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 3.36969148s ago: executing program 1 (id=1442): ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='@') 2.886462608s ago: executing program 3 (id=1443): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x32}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000004c0)=0x80000004, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x10, 0x5}]}, 0x10) bind$inet6(r2, &(0x7f00000005c0)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r2, 0x40) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x70bd26, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xfff7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) 2.228272801s ago: executing program 1 (id=1444): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='environ\x00') preadv(r5, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/113, 0x200000b1}], 0x100000000000008c, 0x1, 0x0) syz_usb_connect(0x0, 0x4c, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c03209040000010202010005"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x24a9c0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f00000007c0)={0x40000, 0x80, 0x1, 'queue0\x00', 0x9}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000880)={0x3, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="0203ff03300000002abd7000fbdbdf2505000900c8000000c19b3c4c497b4056a509e035b7e065060d90dd67e2aad7d2e100000000000000030006003c00000002004e22ac1414bb000000000000000002000100000004d40000070300000000030005000000000002004e21ac1e010100000000000000002100080000080000d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bc8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b42fc8a62d33a08f6dbec1901c7ac90ed4"], 0x180}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)={0x3, 0x0, [{0x1, 0x8ca, 0x3, 0x0, 0xfffffffd, 0x20}, {0xc0000001, 0x800, 0x4, 0x8, 0x3b, 0xd2, 0x4}, {0x0, 0x5, 0x0, 0x1, 0x80000000, 0x200, 0x80000001}]}) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtfilter={0x88, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff2, 0x3}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xdd, 0x2, 0x6}, {0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6}, {0xeaab, 0xffff0001, 0x80, 0x6}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x6}, {0xe, 0x2, 0xe, 0x3, 0x8, 0x1, 0x2}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) 2.107626151s ago: executing program 3 (id=1445): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x20000400) getsockopt$sock_int(r1, 0x1, 0x3e, 0x0, &(0x7f0000000540)=0xfffffffffffffe6a) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='timers\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000640)=""/122, 0x7a}], 0x1, 0x45, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20044044) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x500000, 0x1ff, 0x6, 0x1, 0x0, 0xd, 0x2, 0x4, 0x5, 0x4, 0xf7, 0x7, 0x7fffffffffffffff}, {0x7, 0x3, 0x9, 0xe7, 0x2, 0x80, 0x44, 0x7, 0xc1, 0x0, 0x7, 0xfb, 0xffffffff}, {0xfa7, 0x0, 0x0, 0x7, 0x9, 0x5, 0x2, 0x4, 0x6, 0x6, 0xf, 0x0, 0x4}], 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000440)={0x1, @pix={0xc2, 0x2c9, 0x30314247, 0x0, 0xff, 0xc, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="581800004400010029bd700004000000020000000400488040180180", @ANYRES32], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x9, 0xe6f, 0x400, 0x3, 0x0, 0x4002004c4, 0x1004, 0xb96f, 0x9, 0x100, 0x4, 0x1, 0x7ff, 0xb3, 0x10000000008d], 0x60000, 0xa80}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x480402, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0802, 0x0) prctl$PR_SET_SECCOMP(0x4f, 0x2, &(0x7f0000000340)={0x0, 0x0}) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000300)=0x8) close_range(r7, 0xffffffffffffffff, 0x0) 1.810872967s ago: executing program 3 (id=1446): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4ba}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.559968715s ago: executing program 4 (id=1447): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000100), 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x2980, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r1, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f00000047c0)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000004800)="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", 0x2000, &(0x7f0000006800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000068c0)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0xfffffffc, {0x8000, 0x0, 0x0, 0x91, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r5, 0x0, 0x0, 0xeffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r2, &(0x7f0000006980)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) syz_fuse_handle_req(r1, &(0x7f0000007100)="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", 0x2000, &(0x7f0000009100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000091c0)={0x90, 0x0, 0xff, {0x2, 0x2, 0x742, 0x0, 0xffff4fdc, 0x4, {0x2, 0x6, 0x8000000000000001, 0x2, 0xfffe, 0x8, 0xa, 0x4, 0xba56, 0x4000, 0x7f, r5, 0x0, 0x3, 0x1002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000009280)="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", 0x2000, &(0x7f000000b280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b340)=ANY=[@ANYBLOB="3000000000000000da00000000000000000000a322d65500010000000000000005"], 0x0, 0x0, 0x0, 0x0}) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b70800ec00000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9ffff582ffa03ff092403f3", @ANYRES8=r6, @ANYRES64=r0], 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000c335c14d4695a587a9e24f9281d486ed003b00"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 1.236321367s ago: executing program 1 (id=1448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x62) 1.158284464s ago: executing program 3 (id=1449): socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) (fail_nth: 9) 981.955903ms ago: executing program 2 (id=1450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x27, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x40) 352.455753ms ago: executing program 1 (id=1451): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000", @ANYRES32=r7], 0x48) 344.316175ms ago: executing program 3 (id=1452): fsopen(&(0x7f00000014c0)='proc\x00', 0x0) unshare(0x22020600) r0 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010ac054b0240000102030109022400010108020609210400f30122b60a090581034000034004000000000000000000"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 165.016951ms ago: executing program 0 (id=1453): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x7, 0x4) syz_usb_connect(0x3, 0x44, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xfb, 0x96, 0x92, 0x20, 0x2040, 0x8265, 0x5774, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x3, 0x6, 0xe0, 0xf7, "", [{{0x9, 0x4, 0xc9, 0x4, 0x3, 0xb2, 0x83, 0xeb, 0xff, [], [{{0x9, 0x5, 0xd, 0x1, 0x10, 0x6, 0x6, 0xc}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x7, 0xfd, 0x3}}, {{0x9, 0x5, 0xa, 0x10, 0x5ff, 0x8, 0x9, 0xa, [@generic={0x5, 0x5, "b6b92d"}]}}]}}]}}]}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/182, &(0x7f0000000340)=0xb6) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000180), 0x4) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) 266.185µs ago: executing program 1 (id=1454): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x20088151) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x8094) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000005c0)={r1, &(0x7f0000000380)='/dev/kvm\x00', 0x244001, &(0x7f0000000400)={@align=0x80000000, {0x0, 0x271, 0x400, 0x2}}, 0x3, &(0x7f0000000440), &(0x7f0000000580)=0x9}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl(r5, 0x4048aecb, &(0x7f00000002c0)="070000000000000001000000ffffffff0100"/72) ioctl(r2, 0x4040aec9, &(0x7f0000000500)="150100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000800"/72) (async) ioctl(r5, 0xc048aeca, &(0x7f0000000480)='\a\x00'/72) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x50, 0x80, 0x7f}) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) 0s ago: executing program 2 (id=1455): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x32}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000004c0)=0x80000004, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x10, 0x5}]}, 0x10) bind$inet6(r2, &(0x7f00000005c0)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r2, 0x40) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x70bd26, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xfff7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) kernel console output (not intermixed with test programs): _sys_add_key+0x10/0x10 [ 486.849152][T10480] ? __x64_sys_add_key+0x20/0xc0 [ 486.849163][T10480] do_syscall_64+0x166/0x520 [ 486.849176][T10480] ? trace_irq_disable+0x3b/0x140 [ 486.849188][T10480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.849199][T10480] ? clear_bhb_loop+0x70/0xc0 [ 486.849212][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.849222][T10480] RIP: 0033:0x7fd1e3f9f559 [ 486.849233][T10480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.849241][T10480] RSP: 002b:00007fd1e21f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 486.849253][T10480] RAX: ffffffffffffffda RBX: 00007fd1e4225fa0 RCX: 00007fd1e3f9f559 [ 486.849261][T10480] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 486.849268][T10480] RBP: 00007fd1e21f6090 R08: 0000000009e613cf R09: 0000000000000000 [ 486.849274][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.849280][T10480] R13: 00007fd1e4226038 R14: 00007fd1e4225fa0 R15: 00007fd1e434fa48 [ 486.849297][T10480] [ 487.029892][ T5696] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 487.205023][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 487.208439][ T5696] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 487.212097][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.247943][ T5696] usb 2-1: config 0 descriptor?? [ 487.274543][ T5696] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 487.740237][ T5709] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 487.900926][ T5709] usb 3-1: unable to get BOS descriptor or descriptor too short [ 487.902090][ T5709] usb 3-1: not running at top speed; connect to a high speed hub [ 487.902121][ T5709] usb 3-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 487.903432][ T5709] usb 3-1: config 160 has an invalid interface number: 187 but max is 0 [ 487.903457][ T5709] usb 3-1: config 160 has no interface number 0 [ 487.903485][ T5709] usb 3-1: config 160 interface 187 has no altsetting 0 [ 487.953496][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.953518][ T5709] usb 3-1: Product: syz [ 487.953531][ T5709] usb 3-1: Manufacturer: syz [ 487.953543][ T5709] usb 3-1: SerialNumber: syz [ 488.149177][ T5696] gspca_vc032x: reg_w err -71 [ 488.149256][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149292][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149301][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149309][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149317][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149323][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149327][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149332][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149336][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149341][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149345][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149349][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149354][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149358][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149363][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149367][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149371][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149376][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.149382][ T5696] gspca_vc032x: Unknown sensor... [ 488.149478][ T5696] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 488.154405][ T5696] usb 2-1: USB disconnect, device number 83 [ 489.215473][ T5709] pl2303 3-1:160.187: required endpoints missing [ 489.243844][ T5709] usb 3-1: USB disconnect, device number 58 [ 489.387880][T10508] fuse: Bad value for 'fd' [ 489.417692][ T5689] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -71 [ 489.444821][ T5689] usb 5-1: USB disconnect, device number 82 [ 489.634774][ T5713] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 489.785210][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 489.792929][ T5713] usb 2-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 489.805755][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.805783][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 174, changing to 11 [ 489.805797][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 489.805808][ T5713] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 489.852653][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.852669][ T5713] usb 2-1: Product: syz [ 489.852678][ T5713] usb 2-1: Manufacturer: syz [ 489.852684][ T5713] usb 2-1: SerialNumber: syz [ 489.894925][ T5709] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 490.025236][T10518] 8021q: VLANs not supported on ip6_vti0 [ 490.026393][T10515] FAULT_INJECTION: forcing a failure. [ 490.026393][T10515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 490.026426][T10515] CPU: 0 UID: 0 PID: 10515 Comm: syz.4.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.026453][T10515] Tainted: [L]=SOFTLOCKUP [ 490.026460][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 490.026472][T10515] Call Trace: [ 490.026480][T10515] [ 490.026488][T10515] dump_stack_lvl+0xe8/0x150 [ 490.026521][T10515] should_fail_ex+0x410/0x560 [ 490.026554][T10515] prepare_alloc_pages+0x21e/0x5f0 [ 490.026587][T10515] __alloc_frozen_pages_noprof+0x17a/0x400 [ 490.026620][T10515] ? __lock_acquire+0x747/0x2de0 [ 490.026643][T10515] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 490.026687][T10515] alloc_pages_mpol+0x21e/0x390 [ 490.026713][T10515] alloc_pages_noprof+0xb1/0x2b0 [ 490.026735][T10515] pte_alloc_one+0x22/0x370 [ 490.026762][T10515] __pte_alloc+0x25/0x1a0 [ 490.026791][T10515] do_pte_missing+0x2db7/0x34b0 [ 490.026819][T10515] ? mtree_range_walk+0x707/0x8b0 [ 490.026945][T10515] handle_mm_fault+0x1a53/0x3750 [ 490.026977][T10515] ? handle_mm_fault+0xf1/0x3750 [ 490.027008][T10515] ? __pfx_handle_mm_fault+0x10/0x10 [ 490.027042][T10515] ? __pfx___up_read+0x10/0x10 [ 490.027071][T10515] ? lock_mm_and_find_vma+0xa7/0x340 [ 490.027096][T10515] do_user_addr_fault+0x7f6/0x1480 [ 490.027134][T10515] exc_page_fault+0x6a/0xc0 [ 490.027161][T10515] asm_exc_page_fault+0x26/0x30 [ 490.027179][T10515] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 490.027201][T10515] Code: 7e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 490.027215][T10515] RSP: 0018:ffffc90005287b88 EFLAGS: 00050202 [ 490.027232][T10515] RAX: 00007ffffffff001 RBX: 00000000001fefe4 RCX: 0000000000001864 [ 490.027245][T10515] RDX: 0000000000000001 RSI: 0000200000200000 RDI: ffff88803cdfd780 [ 490.027258][T10515] RBP: 0000200000002880 R08: 0000000000000003 R09: 0000000000000004 [ 490.027270][T10515] R10: dffffc0000000000 R11: ffffed10079bfdfc R12: 0000000000040000 [ 490.027283][T10515] R13: 1ffff92000a50fad R14: ffff88803cc00000 R15: 0000200000002880 [ 490.027313][T10515] _copy_from_user+0x7a/0xb0 [ 490.027342][T10515] vmemdup_user+0x5e/0xd0 [ 490.027367][T10515] map_lookup_and_delete_elem+0x33e/0xab0 [ 490.027398][T10515] ? bpf_lsm_bpf+0x9/0x20 [ 490.027423][T10515] __sys_bpf+0xb9a/0xd90 [ 490.027453][T10515] ? vfs_write+0x960/0xba0 [ 490.027478][T10515] ? __pfx___sys_bpf+0x10/0x10 [ 490.027533][T10515] ? ksys_write+0x1fc/0x270 [ 490.027559][T10515] ? __pfx_ksys_write+0x10/0x10 [ 490.027589][T10515] __x64_sys_bpf+0xba/0xd0 [ 490.027621][T10515] do_syscall_64+0x166/0x520 [ 490.027645][T10515] ? trace_irq_disable+0x3b/0x140 [ 490.027666][T10515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.027685][T10515] ? clear_bhb_loop+0x70/0xc0 [ 490.027706][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.027724][T10515] RIP: 0033:0x7f545519f559 [ 490.027740][T10515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.027754][T10515] RSP: 002b:00007f54560ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 490.027771][T10515] RAX: ffffffffffffffda RBX: 00007f5455425fa0 RCX: 00007f545519f559 [ 490.027784][T10515] RDX: 0000000000000020 RSI: 0000200000002840 RDI: 0000000000000015 [ 490.027796][T10515] RBP: 00007f54560ac090 R08: 0000000000000000 R09: 0000000000000000 [ 490.027806][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.027817][T10515] R13: 00007f5455426038 R14: 00007f5455425fa0 R15: 00007f545554fa48 [ 490.027848][T10515] [ 490.129636][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 490.159735][ T5709] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 490.211077][ T5709] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 490.211113][ T5709] usb 3-1: config 0 has no interface number 0 [ 490.256809][ T5713] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.266654][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.266678][ T5709] usb 3-1: Product: syz [ 490.266691][ T5709] usb 3-1: Manufacturer: syz [ 490.266704][ T5709] usb 3-1: SerialNumber: syz [ 490.269559][ T5709] usb 3-1: config 0 descriptor?? [ 490.275724][ T5709] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 490.509875][ T5709] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 490.530245][ T5709] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 490.726725][ T5713] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 490.732040][ T5713] usb 2-1: USB disconnect, device number 84 [ 490.741719][T10510] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1146'. [ 490.809916][ T9748] udevd[9748]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.819137][T10534] fuse: Bad value for 'fd' [ 490.943576][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 490.943931][ T29] usb 3-1: USB disconnect, device number 59 [ 490.951129][ T29] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 490.979536][ T29] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 490.980316][ T29] quatech2 3-1:0.51: device disconnected [ 491.005523][ T5709] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 491.165651][ T5709] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 491.166602][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.166629][ T5709] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 491.167835][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 491.167848][ T5709] usb 5-1: Product: syz [ 491.167856][ T5709] usb 5-1: Manufacturer: syz [ 491.354758][ T5713] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 491.402959][T10531] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1155'. [ 491.462338][ T5709] usb 5-1: USB disconnect, device number 83 [ 491.504785][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 491.505831][ T5713] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 491.506920][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.509862][ T5713] usb 4-1: config 0 descriptor?? [ 491.545701][ T5713] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 491.551800][T10549] usb usb7: usbfs: process 10549 (syz.2.1161) did not claim interface 0 before use [ 492.011193][T10567] FAULT_INJECTION: forcing a failure. [ 492.011193][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 492.011227][T10567] CPU: 0 UID: 0 PID: 10567 Comm: syz.0.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.011252][T10567] Tainted: [L]=SOFTLOCKUP [ 492.011259][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 492.011270][T10567] Call Trace: [ 492.011278][T10567] [ 492.011287][T10567] dump_stack_lvl+0xe8/0x150 [ 492.011322][T10567] should_fail_ex+0x410/0x560 [ 492.011354][T10567] should_failslab+0xa8/0x100 [ 492.011373][T10567] ? skb_clone+0x212/0x3a0 [ 492.011401][T10567] kmem_cache_alloc_noprof+0x9c/0x600 [ 492.011428][T10567] ? skb_clone+0x212/0x3a0 [ 492.011461][T10567] skb_clone+0x212/0x3a0 [ 492.011489][T10567] __netlink_deliver_tap+0x355/0x6e0 [ 492.011523][T10567] ? netlink_deliver_tap+0x2e/0x1b0 [ 492.011544][T10567] netlink_deliver_tap+0x19c/0x1b0 [ 492.011565][T10567] netlink_unicast+0x8c1/0xa80 [ 492.011601][T10567] netlink_sendmsg+0x7f0/0xb20 [ 492.011627][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.011652][T10567] ? aa_sock_msg_perm+0x144/0x210 [ 492.011682][T10567] ? apparmor_socket_sendmsg+0x98/0x360 [ 492.011707][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.011727][T10567] sock_sendmsg_nosec+0x14e/0x190 [ 492.011751][T10567] sock_sendmsg+0x1ca/0x2d0 [ 492.011770][T10567] ? __lock_acquire+0x747/0x2de0 [ 492.011794][T10567] ? __pfx_sock_sendmsg+0x10/0x10 [ 492.011828][T10567] ? __asan_memset+0x22/0x50 [ 492.011852][T10567] ? iov_iter_bvec+0xb8/0x180 [ 492.011889][T10567] splice_to_socket+0xc4d/0x1460 [ 492.011941][T10567] ? __pfx_splice_to_socket+0x10/0x10 [ 492.012012][T10567] ? __pfx_splice_to_socket+0x10/0x10 [ 492.012038][T10567] direct_splice_actor+0x101/0x160 [ 492.012068][T10567] splice_direct_to_actor+0x57b/0xcb0 [ 492.012115][T10567] ? __pfx_direct_splice_actor+0x10/0x10 [ 492.012142][T10567] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 492.012179][T10567] do_splice_direct+0x195/0x290 [ 492.012208][T10567] ? __pfx_do_splice_direct+0x10/0x10 [ 492.012236][T10567] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 492.012266][T10567] ? bpf_lsm_file_permission+0x9/0x20 [ 492.012286][T10567] ? security_file_permission+0x75/0x260 [ 492.012309][T10567] ? rw_verify_area+0x203/0x4c0 [ 492.012334][T10567] ? fdget+0x1ac/0x250 [ 492.012360][T10567] do_sendfile+0x52e/0x7c0 [ 492.012383][T10567] ? __pfx_do_sendfile+0x10/0x10 [ 492.012407][T10567] ? fdget+0x1ac/0x250 [ 492.012437][T10567] __se_sys_sendfile64+0x144/0x1a0 [ 492.012461][T10567] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 492.012494][T10567] do_syscall_64+0x166/0x520 [ 492.012520][T10567] ? trace_irq_disable+0x3b/0x140 [ 492.012542][T10567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.012562][T10567] ? clear_bhb_loop+0x70/0xc0 [ 492.012586][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.012605][T10567] RIP: 0033:0x7f4add19f559 [ 492.012623][T10567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.012638][T10567] RSP: 002b:00007f4addfbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 492.012658][T10567] RAX: ffffffffffffffda RBX: 00007f4add425fa0 RCX: 00007f4add19f559 [ 492.012672][T10567] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000b [ 492.012684][T10567] RBP: 00007f4addfbf090 R08: 0000000000000000 R09: 0000000000000000 [ 492.012696][T10567] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.012708][T10567] R13: 00007f4add426038 R14: 00007f4add425fa0 R15: 00007f4add54fa48 [ 492.012739][T10567] [ 492.216710][T10574] tipc: Enabling of bearer rejected, failed to enable media [ 492.248102][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 492.314770][ T29] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 492.329708][T10577] loop5: detected capacity change from 0 to 7 [ 492.334316][T10577] Dev loop5: unable to read RDB block 7 [ 492.334489][T10577] loop5: unable to read partition table [ 492.335197][T10577] loop5: partition table beyond EOD, truncated [ 492.335215][T10577] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 492.455671][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 492.460248][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 492.462596][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 492.462617][ T10] usb 3-1: config 0 has no interface number 0 [ 492.484909][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 492.485489][ T29] usb 5-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 492.486796][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.486837][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 174, changing to 11 [ 492.486863][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 492.486882][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 492.489372][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.489393][ T29] usb 5-1: Product: syz [ 492.489407][ T29] usb 5-1: Manufacturer: syz [ 492.489421][ T29] usb 5-1: SerialNumber: syz [ 492.499774][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.499795][ T10] usb 3-1: Product: syz [ 492.499840][ T10] usb 3-1: Manufacturer: syz [ 492.499854][ T10] usb 3-1: SerialNumber: syz [ 492.580713][ T5713] gspca_vc032x: reg_w err -71 [ 492.580730][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580740][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580749][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580757][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580766][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580775][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580783][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580792][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580799][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580821][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580830][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580838][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580846][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580854][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580863][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580871][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580879][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580887][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.580896][ T5713] gspca_vc032x: Unknown sensor... [ 492.580968][ T5713] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 492.695595][ T5713] usb 4-1: USB disconnect, device number 77 [ 492.697367][ T10] usb 3-1: config 0 descriptor?? [ 492.702850][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 492.756203][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.847263][ T29] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 492.852033][ T29] usb 5-1: USB disconnect, device number 84 [ 492.897123][ T8165] udevd[8165]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.914609][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 492.931690][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 493.085896][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 493.085913][ T30] audit: type=1326 audit(1792827846.875:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 493.086053][ T30] audit: type=1326 audit(1792827846.875:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 493.086620][ T30] audit: type=1326 audit(1792827846.875:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 493.086834][ T30] audit: type=1326 audit(1792827846.875:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 493.087116][ T30] audit: type=1326 audit(1792827846.875:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 493.087287][ T30] audit: type=1326 audit(1792827846.875:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 493.087479][ T30] audit: type=1326 audit(1792827846.875:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 493.087693][ T30] audit: type=1326 audit(1792827846.875:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 493.087845][ T30] audit: type=1326 audit(1792827846.875:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 493.088047][ T30] audit: type=1326 audit(1792827846.875:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 493.088152][T10586] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1176'. [ 493.236547][ T10] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 493.308806][T10562] nvme_fabrics: missing parameter 'host_traddr=%s' [ 493.407599][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 493.408803][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.408825][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.410036][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 493.410058][ T10] usb 2-1: SerialNumber: syz [ 493.433195][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 493.433729][ T5713] usb 3-1: USB disconnect, device number 60 [ 493.473302][ T5713] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 493.502888][ T5713] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 493.507566][ T5713] quatech2 3-1:0.51: device disconnected [ 493.615379][T10599] FAULT_INJECTION: forcing a failure. [ 493.615379][T10599] name failslab, interval 1, probability 0, space 0, times 0 [ 493.615400][T10599] CPU: 0 UID: 0 PID: 10599 Comm: syz.0.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.615417][T10599] Tainted: [L]=SOFTLOCKUP [ 493.615421][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 493.615428][T10599] Call Trace: [ 493.615433][T10599] [ 493.615438][T10599] dump_stack_lvl+0xe8/0x150 [ 493.615458][T10599] should_fail_ex+0x410/0x560 [ 493.615476][T10599] ? __alloc_skb+0x1db/0x7a0 [ 493.615490][T10599] should_failslab+0xa8/0x100 [ 493.615502][T10599] ? __alloc_skb+0x1db/0x7a0 [ 493.615513][T10599] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 493.615527][T10599] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 493.615542][T10599] ? __alloc_skb+0x1db/0x7a0 [ 493.615558][T10599] __alloc_skb+0x1db/0x7a0 [ 493.615572][T10599] tipc_buf_acquire+0x2b/0xe0 [ 493.615655][T10599] tipc_msg_build+0x911/0xf50 [ 493.615731][T10599] ? __pfx_tipc_msg_build+0x10/0x10 [ 493.615747][T10599] ? net_generic+0x1e/0x240 [ 493.615782][T10599] ? net_generic+0x1e/0x240 [ 493.615794][T10599] ? tipc_group_bc_cong+0x15f/0x210 [ 493.615836][T10599] tipc_send_group_bcast+0x7db/0xad0 [ 493.615859][T10599] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 493.615877][T10599] ? __kernel_text_address+0xd/0x30 [ 493.615890][T10599] ? __pfx_woken_wake_function+0x10/0x10 [ 493.615906][T10599] ? look_up_lock_class+0x57/0x110 [ 493.615925][T10599] __tipc_sendmsg+0x313/0x2b60 [ 493.615942][T10599] ? ima_match_policy+0x21a6/0x2230 [ 493.616007][T10599] ? __pfx___tipc_sendmsg+0x10/0x10 [ 493.616020][T10599] ? aa_label_sk_perm+0x532/0x6e0 [ 493.616053][T10599] ? lock_acquire+0x115/0x350 [ 493.616067][T10599] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 493.616086][T10599] ? __lock_acquire+0x747/0x2de0 [ 493.616113][T10599] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 493.616130][T10599] ? tipc_sendmsg+0x47/0x70 [ 493.616144][T10599] ? __local_bh_enable_ip+0xd6/0x140 [ 493.616158][T10599] tipc_sendmsg+0x55/0x70 [ 493.616171][T10599] ? __pfx_tipc_sendmsg+0x10/0x10 [ 493.616183][T10599] sock_sendmsg_nosec+0x14e/0x190 [ 493.616196][T10599] ____sys_sendmsg+0x54e/0x850 [ 493.616213][T10599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.616231][T10599] ? import_iovec+0x73/0xa0 [ 493.616253][T10599] ___sys_sendmsg+0x2a5/0x360 [ 493.616266][T10599] ? __lock_acquire+0x747/0x2de0 [ 493.616280][T10599] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.616296][T10599] ? kstrtouint+0x6e/0xe0 [ 493.616322][T10599] ? __fget_files+0x3a2/0x420 [ 493.616335][T10599] ? __fget_files+0x2a/0x420 [ 493.616352][T10599] __sys_sendmmsg+0x273/0x4e0 [ 493.616369][T10599] ? __pfx___sys_sendmmsg+0x10/0x10 [ 493.616388][T10599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 493.616410][T10599] ? ksys_write+0x242/0x270 [ 493.616425][T10599] ? __pfx_ksys_write+0x10/0x10 [ 493.616442][T10599] __x64_sys_sendmmsg+0xa0/0xc0 [ 493.616457][T10599] do_syscall_64+0x166/0x520 [ 493.616470][T10599] ? trace_irq_disable+0x3b/0x140 [ 493.616482][T10599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.616493][T10599] ? clear_bhb_loop+0x70/0xc0 [ 493.616505][T10599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.616516][T10599] RIP: 0033:0x7f4add19f559 [ 493.616526][T10599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.616535][T10599] RSP: 002b:00007f4addfbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 493.616548][T10599] RAX: ffffffffffffffda RBX: 00007f4add425fa0 RCX: 00007f4add19f559 [ 493.616556][T10599] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 493.616563][T10599] RBP: 00007f4addfbf090 R08: 0000000000000000 R09: 0000000000000000 [ 493.616569][T10599] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.616576][T10599] R13: 00007f4add426038 R14: 00007f4add425fa0 R15: 00007f4add54fa48 [ 493.616593][T10599] [ 494.868533][T10620] dvmrp6: entered allmulticast mode [ 494.997495][T10621] usb usb7: usbfs: process 10621 (syz.4.1187) did not claim interface 0 before use [ 495.603896][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 495.614082][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'. [ 495.668524][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 495.972774][ T10] usb 2-1: 0:2 : does not exist [ 496.025448][ T5713] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 496.103380][ T10] usb 2-1: USB disconnect, device number 85 [ 496.175888][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 496.176972][ T5713] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 496.178294][ T5713] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 496.178316][ T5713] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 496.179992][ T8319] udevd[8319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.183027][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.183041][ T5713] usb 3-1: Product: syz [ 496.183048][ T5713] usb 3-1: Manufacturer: syz [ 496.183055][ T5713] usb 3-1: SerialNumber: syz [ 496.254511][ T5713] usb 3-1: config 0 descriptor?? [ 496.283085][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'. [ 496.344871][ T8792] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 496.355897][T10651] FAULT_INJECTION: forcing a failure. [ 496.355897][T10651] name failslab, interval 1, probability 0, space 0, times 0 [ 496.357797][T10651] CPU: 0 UID: 0 PID: 10651 Comm: syz.1.1197 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.357825][T10651] Tainted: [L]=SOFTLOCKUP [ 496.357831][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 496.357842][T10651] Call Trace: [ 496.357850][T10651] [ 496.357858][T10651] dump_stack_lvl+0xe8/0x150 [ 496.357886][T10651] should_fail_ex+0x410/0x560 [ 496.357908][T10651] should_failslab+0xa8/0x100 [ 496.357921][T10651] __kvmalloc_node_noprof+0x171/0x820 [ 496.357942][T10651] ? __kmalloc_cache_noprof+0x31c/0x600 [ 496.357956][T10651] ? __kmalloc_cache_noprof+0x148/0x600 [ 496.357968][T10651] ? percpu_ref_init+0xc5/0x350 [ 496.357980][T10651] ? io_alloc_cache_init+0x42/0x140 [ 496.357991][T10651] ? io_alloc_cache_init+0x42/0x140 [ 496.358006][T10651] io_alloc_cache_init+0x42/0x140 [ 496.358019][T10651] io_ring_ctx_alloc+0x508/0xb80 [ 496.358034][T10651] io_uring_create+0x50/0x980 [ 496.358046][T10651] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 496.358060][T10651] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.358076][T10651] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 496.358097][T10651] ? __pfx_ksys_write+0x10/0x10 [ 496.358117][T10651] do_syscall_64+0x166/0x520 [ 496.358131][T10651] ? trace_irq_disable+0x3b/0x140 [ 496.358143][T10651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.358153][T10651] ? clear_bhb_loop+0x70/0xc0 [ 496.358165][T10651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.358175][T10651] RIP: 0033:0x7f64df79f559 [ 496.358186][T10651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.358194][T10651] RSP: 002b:00007f64e0623ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 496.358206][T10651] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f64df79f559 [ 496.358214][T10651] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000e26 [ 496.358220][T10651] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 496.358227][T10651] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 496.358234][T10651] R13: 0000200000000890 R14: 00007f64e0623fd8 R15: 0000000000000000 [ 496.358250][T10651] [ 496.593704][ T8792] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 496.630411][ T8792] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 496.630436][ T8792] usb 5-1: Product: syz [ 496.630449][ T8792] usb 5-1: SerialNumber: syz [ 496.652307][ T8792] usb 5-1: config 0 descriptor?? [ 496.875887][T10659] FAULT_INJECTION: forcing a failure. [ 496.875887][T10659] name failslab, interval 1, probability 0, space 0, times 0 [ 496.875921][T10659] CPU: 0 UID: 0 PID: 10659 Comm: syz.3.1198 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.875944][T10659] Tainted: [L]=SOFTLOCKUP [ 496.875951][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 496.875962][T10659] Call Trace: [ 496.875970][T10659] [ 496.875978][T10659] dump_stack_lvl+0xe8/0x150 [ 496.876015][T10659] should_fail_ex+0x410/0x560 [ 496.876048][T10659] should_failslab+0xa8/0x100 [ 496.876071][T10659] __kmalloc_noprof+0xf9/0x710 [ 496.876098][T10659] ? io_cache_alloc_new+0x40/0x100 [ 496.876119][T10659] ? io_cache_alloc_new+0x40/0x100 [ 496.876144][T10659] io_cache_alloc_new+0x40/0x100 [ 496.876167][T10659] io_arm_apoll+0x459/0x910 [ 496.876198][T10659] ? __pfx_io_arm_apoll+0x10/0x10 [ 496.876228][T10659] ? __io_issue_sqe+0x1ff/0x450 [ 496.876254][T10659] ? io_arm_poll_handler+0x20b/0x2a0 [ 496.876285][T10659] io_queue_async+0x18b/0x2e0 [ 496.876304][T10659] io_submit_sqes+0x1125/0x2310 [ 496.876340][T10659] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 496.876385][T10659] ? fdget+0x1ac/0x250 [ 496.876410][T10659] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 496.876429][T10659] ? fput+0xa0/0xd0 [ 496.876440][T10659] ? ksys_write+0x242/0x270 [ 496.876456][T10659] ? __pfx_ksys_write+0x10/0x10 [ 496.876472][T10659] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 496.876492][T10659] do_syscall_64+0x166/0x520 [ 496.876519][T10659] ? trace_irq_disable+0x3b/0x140 [ 496.876541][T10659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.876560][T10659] ? clear_bhb_loop+0x70/0xc0 [ 496.876578][T10659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.876588][T10659] RIP: 0033:0x7f802819f559 [ 496.876599][T10659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.876608][T10659] RSP: 002b:00007f802909b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 496.876620][T10659] RAX: ffffffffffffffda RBX: 00007f8028425fa0 RCX: 00007f802819f559 [ 496.876627][T10659] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 496.876638][T10659] RBP: 00007f802909b090 R08: 0000000000000000 R09: 0000000000000000 [ 496.876649][T10659] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 496.876661][T10659] R13: 00007f8028426038 R14: 00007f8028425fa0 R15: 00007f802854fa48 [ 496.876694][T10659] [ 497.346468][T10663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1199'. [ 497.410002][ T8792] usb 5-1: USB disconnect, device number 85 [ 497.620402][T10671] FAULT_INJECTION: forcing a failure. [ 497.620402][T10671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.620436][T10671] CPU: 1 UID: 0 PID: 10671 Comm: syz.3.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.620461][T10671] Tainted: [L]=SOFTLOCKUP [ 497.620470][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 497.620482][T10671] Call Trace: [ 497.620489][T10671] [ 497.620498][T10671] dump_stack_lvl+0xe8/0x150 [ 497.620530][T10671] should_fail_ex+0x410/0x560 [ 497.620564][T10671] _copy_from_iter+0x1d3/0x1660 [ 497.620591][T10671] ? skb_set_owner_w+0x263/0x3d0 [ 497.620621][T10671] ? sock_alloc_send_pskb+0xc87/0xd90 [ 497.620652][T10671] ? __pfx__copy_from_iter+0x10/0x10 [ 497.620675][T10671] ? call_rcu+0x86/0x300 [ 497.620700][T10671] ? rt_set_nexthop+0x48b/0xa20 [ 497.620807][T10671] ip_generic_getfrag+0xeb/0x2d0 [ 497.620841][T10671] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 497.620870][T10671] ? skb_put+0x112/0x210 [ 497.620899][T10671] __ip_append_data+0x2f45/0x3cf0 [ 497.620939][T10671] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 497.620978][T10671] ? ipv4_mtu+0x23/0x670 [ 497.621003][T10671] ? __pfx___ip_append_data+0x10/0x10 [ 497.621026][T10671] ? ipv4_mtu+0x561/0x670 [ 497.621051][T10671] ? ip_setup_cork+0x512/0x920 [ 497.621077][T10671] ip_make_skb+0x22e/0x440 [ 497.621107][T10671] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 497.621132][T10671] ? __pfx_ip_make_skb+0x10/0x10 [ 497.621174][T10671] udp_sendmsg+0x1937/0x2140 [ 497.621250][T10671] ? __pfx_ip6_addr_string+0x10/0x10 [ 497.621289][T10671] ? __pfx_udp_sendmsg+0x10/0x10 [ 497.621331][T10671] ? tomoyo_supervisor+0x4d2/0x1550 [ 497.621402][T10671] ? lockdep_hardirqs_on+0x7b/0x110 [ 497.621415][T10671] ? get_random_u32+0x13a/0x8b0 [ 497.621452][T10671] ? get_random_u32+0x4ce/0x8b0 [ 497.621465][T10671] udpv6_sendmsg+0x915/0x2610 [ 497.621517][T10671] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 497.621527][T10671] ? udp_lib_get_port+0x1776/0x1c50 [ 497.621555][T10671] ? inet_send_prepare+0x1b4/0x260 [ 497.621593][T10671] ? lockdep_hardirqs_on+0x7b/0x110 [ 497.621606][T10671] ? inet_send_prepare+0x1b4/0x260 [ 497.621618][T10671] ? __local_bh_enable_ip+0xd6/0x140 [ 497.621631][T10671] ? inet_send_prepare+0x1b4/0x260 [ 497.621645][T10671] ? inet6_sendmsg+0xe4/0x120 [ 497.621699][T10671] ? __pfx_inet6_sendmsg+0x10/0x10 [ 497.621711][T10671] sock_sendmsg_nosec+0x90/0x190 [ 497.621725][T10671] ____sys_sendmsg+0x54e/0x850 [ 497.621741][T10671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.621760][T10671] ? import_iovec+0x73/0xa0 [ 497.621777][T10671] ___sys_sendmsg+0x2a5/0x360 [ 497.621789][T10671] ? __lock_acquire+0x747/0x2de0 [ 497.621806][T10671] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.621823][T10671] ? kstrtouint+0x6e/0xe0 [ 497.621848][T10671] ? __fget_files+0x3a2/0x420 [ 497.621861][T10671] ? __fget_files+0x2a/0x420 [ 497.621878][T10671] __sys_sendmmsg+0x273/0x4e0 [ 497.621894][T10671] ? __pfx___sys_sendmmsg+0x10/0x10 [ 497.621917][T10671] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.621940][T10671] ? ksys_write+0x242/0x270 [ 497.621955][T10671] ? __pfx_ksys_write+0x10/0x10 [ 497.621971][T10671] __x64_sys_sendmmsg+0xa0/0xc0 [ 497.621986][T10671] do_syscall_64+0x166/0x520 [ 497.622000][T10671] ? trace_irq_disable+0x3b/0x140 [ 497.622012][T10671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.622023][T10671] ? clear_bhb_loop+0x70/0xc0 [ 497.622036][T10671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.622046][T10671] RIP: 0033:0x7f802819f559 [ 497.622057][T10671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.622066][T10671] RSP: 002b:00007f802909b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 497.622078][T10671] RAX: ffffffffffffffda RBX: 00007f8028425fa0 RCX: 00007f802819f559 [ 497.622086][T10671] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 497.622092][T10671] RBP: 00007f802909b090 R08: 0000000000000000 R09: 0000000000000000 [ 497.622099][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.622105][T10671] R13: 00007f8028426038 R14: 00007f8028425fa0 R15: 00007f802854fa48 [ 497.622121][T10671] [ 498.517751][T10673] could not allocate digest TFM handle michael_mic [ 498.625157][T10673] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1203'. [ 498.680629][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1205'. [ 498.710505][T10673] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.594795][ T5709] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 499.748111][ T5709] usb 4-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 499.752420][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.752455][ T5709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.788964][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 499.788979][ T5709] usb 4-1: SerialNumber: syz [ 499.859219][ T5713] usb 3-1: USB disconnect, device number 61 [ 500.240840][T10718] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1216'. [ 500.365210][ T8792] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 500.514879][ T8792] usb 5-1: Using ep0 maxpacket: 8 [ 500.517815][ T8792] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 500.519688][ T8792] usb 5-1: config 64 interface 0 has no altsetting 0 [ 500.524447][ T8792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.524460][ T8792] usb 5-1: Product: syz [ 500.524468][ T8792] usb 5-1: Manufacturer: syz [ 500.524476][ T8792] usb 5-1: SerialNumber: syz [ 500.579554][T10722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.610217][ T8792] snd_usb_toneport 5-1:64.0: Line 6 TonePort UX2 found [ 500.858514][ T8792] snd_usb_toneport 5-1:64.0: Line 6 TonePort UX2 now disconnected [ 500.864532][T10727] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1219'. [ 500.887486][ T8792] snd_usb_toneport 5-1:64.0: probe with driver snd_usb_toneport failed with error -22 [ 501.287141][ T8792] usb 5-1: USB disconnect, device number 86 [ 501.467051][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.467087][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.988816][T10740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.094825][ T8792] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 502.248869][ T8792] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 502.250444][ T5709] usb 4-1: 0:2 : does not exist [ 502.251758][ T8792] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 502.251776][ T8792] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 502.251789][ T8792] usb 1-1: config 1 interface 0 has no altsetting 0 [ 502.256543][ T8792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.256564][ T8792] usb 1-1: Product: syz [ 502.256577][ T8792] usb 1-1: Manufacturer: syz [ 502.256590][ T8792] usb 1-1: SerialNumber: syz [ 502.268151][T10738] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 502.268286][T10738] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 502.416156][ T5709] usb 4-1: USB disconnect, device number 78 [ 502.417309][ T5696] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 502.506350][ T8319] udevd[8319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.576146][ T5696] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 502.577381][ T5696] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 502.577406][ T5696] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 502.577454][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.637905][ T5696] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 502.862146][ T5696] gspca_sn9c2028: read1 error -71 [ 502.862531][ T5696] gspca_sn9c2028: read1 error -71 [ 502.862834][ T5696] gspca_sn9c2028: read1 error -71 [ 502.862879][ T5696] sn9c2028 3-1:220.0: probe with driver sn9c2028 failed with error -71 [ 502.895757][ T5696] usb 3-1: USB disconnect, device number 62 [ 503.048437][T10738] veth3: entered allmulticast mode [ 503.376988][ T8792] rtl8150 1-1:1.0: couldn't reset the device [ 503.377240][ T8792] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 503.396129][ T8792] usb 1-1: USB disconnect, device number 60 [ 503.615074][T10777] input: syz0 as /devices/virtual/input/input11 [ 503.885581][ T5713] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 503.965124][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 504.035906][ T5713] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 504.040817][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.068222][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.068245][ T5713] usb 2-1: Product: syz [ 504.068259][ T5713] usb 2-1: Manufacturer: syz [ 504.068271][ T5713] usb 2-1: SerialNumber: syz [ 504.115650][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 504.120657][ T10] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 504.120686][ T10] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 504.120708][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 504.134112][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.134127][ T10] usb 3-1: Product: syz [ 504.134135][ T10] usb 3-1: Manufacturer: syz [ 504.134142][ T10] usb 3-1: SerialNumber: syz [ 504.198244][T10781] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 504.198360][T10781] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 504.611850][ T5713] hackrf 2-1:1.0: usb_control_msg() failed -32 request 0f [ 504.611877][ T5713] hackrf 2-1:1.0: Could not detect board [ 504.611928][ T5713] hackrf 2-1:1.0: probe with driver hackrf failed with error -32 [ 504.615999][ T8792] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 504.806834][ T8792] usb 4-1: Using ep0 maxpacket: 32 [ 504.807764][ T8792] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 504.808952][ T8792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.828534][ T8792] usb 4-1: config 0 descriptor?? [ 504.859448][ T8792] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 504.961984][T10781] veth3: entered allmulticast mode [ 505.194462][ T10] rtl8150 3-1:1.0: couldn't reset the device [ 505.195921][ T10] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 505.226846][ T10] usb 3-1: USB disconnect, device number 63 [ 505.840682][T10831] binder: 10830:10831 ioctl 400c620e 200000000340 returned -22 [ 505.903033][ T8792] gspca_vc032x: reg_w err -71 [ 505.903045][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903051][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903056][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903060][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903065][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903069][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903074][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903078][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903082][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903087][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903091][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903095][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903099][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903104][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903108][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903112][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903117][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903120][ T8792] gspca_vc032x: I2c Bus Busy Wait 00 [ 505.903125][ T8792] gspca_vc032x: Unknown sensor... [ 505.903170][ T8792] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 505.910165][ T8792] usb 4-1: USB disconnect, device number 79 [ 505.983865][T10832] binder: 10830:10832 ioctl 400c620e 200000000840 returned -22 [ 506.019626][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 507.124796][ T5696] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 507.240298][T10851] syzkaller0: entered promiscuous mode [ 507.240319][T10851] syzkaller0: entered allmulticast mode [ 507.248353][T10851] tipc: Started in network mode [ 507.248380][T10851] tipc: Node identity 4e86df017cdf, cluster identity 4711 [ 507.248673][T10851] tipc: Enabled bearer , priority 0 [ 507.254844][T10851] ip_tables: iptables: counters copy to user failed while replacing table [ 507.296509][ T5696] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 507.297626][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.297653][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.297687][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.297713][T10851] tipc: Resetting bearer [ 507.304213][ T5696] usb 4-1: config 0 descriptor?? [ 507.438342][T10850] tipc: Resetting bearer [ 507.456016][T10850] tipc: Disabling bearer [ 507.511272][ T5696] usbhid 4-1:0.0: can't add hid device: -71 [ 507.511380][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 507.532650][ T5696] usb 4-1: USB disconnect, device number 80 [ 507.594768][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 507.738536][ T8792] hid-sensor-hub 0003:1234:5678.0007: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 507.745591][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 507.755544][ T10] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 507.773748][ T10] usb 5-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.773779][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 507.773809][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.800873][ T10] usb 5-1: config 0 descriptor?? [ 507.917596][T10861] fido_id[10861]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 507.930937][T10864] vlan2: entered promiscuous mode [ 507.930957][T10864] macvlan0: entered promiscuous mode [ 508.034806][ T5696] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 508.184865][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 508.185953][ T5696] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 508.185991][ T5696] usb 4-1: no configurations [ 508.186003][ T5696] usb 4-1: can't read configurations, error -22 [ 508.314828][ T5696] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 508.474818][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 508.476991][ T5696] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 508.477015][ T5696] usb 4-1: no configurations [ 508.477022][ T5696] usb 4-1: can't read configurations, error -22 [ 508.477222][ T5696] usb usb4-port1: attempt power cycle [ 508.545997][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 508.546063][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 508.559094][ T10] usb 5-1: USB disconnect, device number 87 [ 508.824862][ T5696] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 508.824914][ T2252] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 508.851965][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 508.852620][ T5696] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 508.852657][ T5696] usb 4-1: no configurations [ 508.852669][ T5696] usb 4-1: can't read configurations, error -22 [ 508.974764][ T5696] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 508.975516][ T2252] usb 1-1: Using ep0 maxpacket: 32 [ 508.976141][ T2252] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 508.977011][ T2252] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 508.977027][ T2252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 508.977039][ T2252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 508.977050][ T2252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 508.977062][ T2252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 508.978872][ T2252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.978886][ T2252] usb 1-1: Product: syz [ 508.978893][ T2252] usb 1-1: Manufacturer: syz [ 508.978901][ T2252] usb 1-1: SerialNumber: syz [ 508.986837][ T2252] usb 1-1: config 0 descriptor?? [ 509.029487][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 509.039871][ T5696] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 509.039904][ T5696] usb 4-1: no configurations [ 509.039915][ T5696] usb 4-1: can't read configurations, error -22 [ 509.051208][ T5696] usb usb4-port1: unable to enumerate USB device [ 509.186064][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 509.217274][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 509.335073][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 509.336000][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 509.337763][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 509.337777][ T10] usb 5-1: config 0 has no interface number 0 [ 509.341669][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.341682][ T10] usb 5-1: Product: syz [ 509.341690][ T10] usb 5-1: Manufacturer: syz [ 509.341697][ T10] usb 5-1: SerialNumber: syz [ 509.402925][ T10] usb 5-1: config 0 descriptor?? [ 509.412414][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 509.458455][T10882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1267'. [ 509.509234][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.510280][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.510610][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.512571][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.519984][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.554997][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.556990][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.557391][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.558059][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.559004][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.559643][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.560786][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.561127][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.562681][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.563068][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.563553][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.564229][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.564607][ T2252] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 509.564640][ T2252] input input12: Timeout waiting for response from device. [ 509.669830][ T2252] usb 1-1: USB disconnect, device number 61 [ 509.682611][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 509.703559][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 509.848880][ T5689] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 510.018088][ T5689] usb 3-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 510.021399][ T5689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.021446][ T5689] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.058541][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 510.058591][ T5689] usb 3-1: SerialNumber: syz [ 510.114462][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 510.115141][ T10] usb 5-1: USB disconnect, device number 88 [ 510.145785][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 510.174325][T10898] macsec0: entered promiscuous mode [ 510.185850][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 510.192611][ T10] quatech2 5-1:0.51: device disconnected [ 510.243076][T10898] macsec0 (unregistering): left promiscuous mode [ 510.563203][ T5689] usb 3-1: 0:2 : does not exist [ 510.795033][ T5689] usb 3-1: USB disconnect, device number 64 [ 510.932678][ T8319] udevd[8319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.069138][T10916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.237911][T10921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1281'. [ 511.238053][T10921] Unknown options in mask b7f2 [ 511.739567][T10933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.739995][T10933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.824933][ T5696] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 511.975492][ T5696] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 511.983683][ T5696] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 511.983703][ T5696] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 511.983715][ T5696] usb 4-1: config 1 interface 0 has no altsetting 0 [ 512.031359][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.031375][ T5696] usb 4-1: Product: syz [ 512.031382][ T5696] usb 4-1: Manufacturer: syz [ 512.031390][ T5696] usb 4-1: SerialNumber: syz [ 512.061279][T10929] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 512.061358][T10929] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 512.653033][T10943] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 512.798559][T10929] veth3: entered allmulticast mode [ 512.854768][ T5709] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 513.015338][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 513.016023][ T5709] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 513.019424][ T5709] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 513.019442][ T5709] usb 1-1: config 0 has no interface number 0 [ 513.055255][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.055270][ T5709] usb 1-1: Product: syz [ 513.055277][ T5709] usb 1-1: Manufacturer: syz [ 513.055285][ T5709] usb 1-1: SerialNumber: syz [ 513.081395][ T5709] usb 1-1: config 0 descriptor?? [ 513.094378][ T5709] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 513.173258][ T5696] rtl8150 4-1:1.0: couldn't reset the device [ 513.173452][ T5696] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 513.197957][ T5696] usb 4-1: USB disconnect, device number 85 [ 513.307145][ T5709] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 513.324795][ T5709] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 513.720859][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 513.721236][ T5696] usb 1-1: USB disconnect, device number 62 [ 513.750433][ T5696] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 513.779378][ T5696] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 513.780616][ T5696] quatech2 1-1:0.51: device disconnected [ 514.400430][T10962] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1292'. [ 514.400445][T10962] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1292'. [ 514.451050][T10964] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1292'. [ 514.451073][T10964] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1292'. [ 514.526537][T10970] IPVS: stopping master sync thread 8366 ... [ 515.001365][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 515.003175][ T30] audit: type=1326 audit(1792827868.785:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.2.1298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f9f559 code=0x7ffc0000 [ 515.003224][ T30] audit: type=1326 audit(1792827868.785:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.2.1298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f9f559 code=0x7ffc0000 [ 515.003510][ T30] audit: type=1326 audit(1792827868.785:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.2.1298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f9f559 code=0x7ffc0000 [ 515.003737][ T30] audit: type=1326 audit(1792827868.785:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.2.1298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f9f559 code=0x7ffc0000 [ 515.004023][ T30] audit: type=1326 audit(1792827868.785:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.2.1298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1e3f9f559 code=0x7ffc0000 [ 515.004046][ T30] audit: type=1326 audit(1792827868.785:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.2.1298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f9f559 code=0x7ffc0000 [ 515.004067][ T30] audit: type=1326 audit(1792827868.785:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.2.1298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f9f559 code=0x7ffc0000 [ 515.004599][ T30] audit: type=1326 audit(1792827868.785:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.2.1298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1e3f9f559 code=0x7ffc0000 [ 515.037013][ T30] audit: type=1326 audit(1792827868.825:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.2.1298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1e3f9f559 code=0x7ffc0000 [ 515.212094][ T5709] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 515.414797][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 515.421336][ T5709] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 515.433573][ T5709] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.433597][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 515.454754][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.454777][ T5709] usb 1-1: Product: syz [ 515.454790][ T5709] usb 1-1: Manufacturer: syz [ 515.454802][ T5709] usb 1-1: SerialNumber: syz [ 515.484066][ T5709] usb 1-1: config 0 descriptor?? [ 515.599744][T10987] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 515.636844][T10990] fuse: Bad value for 'fd' [ 515.637107][T10990] fuse: Bad value for 'fd' [ 515.637328][T10990] fuse: Bad value for 'fd' [ 515.637559][T10990] fuse: Bad value for 'fd' [ 515.664464][T10990] fuse: Bad value for 'fd' [ 515.671160][T10990] fuse: Bad value for 'fd' [ 515.671417][T10990] fuse: Bad value for 'fd' [ 515.671655][T10990] fuse: Bad value for 'fd' [ 515.671893][T10990] fuse: Bad value for 'fd' [ 515.672135][T10990] fuse: Bad value for 'fd' [ 515.715950][T10990] fuse: Bad value for 'fd' [ 515.716221][T10990] fuse: Bad value for 'fd' [ 515.716471][T10990] fuse: Bad value for 'fd' [ 515.716720][T10990] fuse: Bad value for 'fd' [ 515.716957][T10990] fuse: Bad value for 'fd' [ 515.720683][ T5709] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 515.780664][T10990] fuse: Bad value for 'fd' [ 515.780932][T10990] fuse: Bad value for 'fd' [ 515.781184][T10990] fuse: Bad value for 'fd' [ 515.781425][T10990] fuse: Bad value for 'fd' [ 515.781671][T10990] fuse: Bad value for 'fd' [ 515.781904][T10990] fuse: Bad value for 'fd' [ 515.825514][T10990] fuse: Bad value for 'fd' [ 515.851067][T10989] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1301'. [ 515.864141][ T5689] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 515.880816][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1300'. [ 516.000413][ T5689] usb 4-1: device descriptor read/64, error -71 [ 516.035124][ T5709] rc_core: IR keymap rc-imon-pad not found [ 516.035141][ T5709] Registered IR keymap rc-empty [ 516.035328][ T5709] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 516.035345][ T5709] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 516.148363][ T5709] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 516.191959][ T5709] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 516.213695][ T5709] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:63> initialized [ 516.238112][ T5689] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 516.366799][ T5689] usb 4-1: device descriptor read/64, error -71 [ 516.476438][ T5689] usb usb4-port1: attempt power cycle [ 516.627202][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'. [ 516.654125][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 516.662073][ T5709] usb 1-1: USB disconnect, device number 63 [ 516.814773][ T5689] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 516.841721][ T5689] usb 4-1: device descriptor read/8, error -71 [ 517.075398][ T5689] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 517.096758][ T5689] usb 4-1: device descriptor read/8, error -71 [ 517.205737][ T5689] usb usb4-port1: unable to enumerate USB device [ 517.255295][ T5709] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 517.354521][T11011] IPVS: stopping master sync thread 6206 ... [ 517.425569][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 517.426250][ T5709] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 517.427302][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.431458][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.431480][ T5709] usb 5-1: Product: syz [ 517.431488][ T5709] usb 5-1: Manufacturer: syz [ 517.431496][ T5709] usb 5-1: SerialNumber: syz [ 517.483670][ T5709] usb 5-1: config 0 descriptor?? [ 517.495891][ T5709] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 517.529104][T11013] sg_write: data in/out 235872/136 bytes for SCSI command 0x0-- guessing data in; [ 517.529104][T11013] program syz.0.1307 not setting count and/or reply_len properly [ 517.696624][ T5689] usb 5-1: USB disconnect, device number 89 [ 517.833807][T11019] netlink: zone id is out of range [ 517.833848][T11019] netlink: zone id is out of range [ 517.887274][ T150] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 517.887673][ T85] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 517.887717][ T85] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 517.887735][ T85] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 518.584949][ T5709] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 518.655359][ T8792] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 518.754736][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 518.758368][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 518.758398][ T5709] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 518.759708][ T5709] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.759730][ T5709] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 518.763550][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.763564][ T5709] usb 1-1: Product: syz [ 518.763572][ T5709] usb 1-1: Manufacturer: syz [ 518.763579][ T5709] usb 1-1: SerialNumber: syz [ 518.842174][ T8792] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 518.858720][ T8792] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 518.858769][ T8792] usb 5-1: config 0 has no interface number 0 [ 518.863549][ T8792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.863596][ T8792] usb 5-1: Product: syz [ 518.863610][ T8792] usb 5-1: Manufacturer: syz [ 518.863623][ T8792] usb 5-1: SerialNumber: syz [ 518.906070][ T8792] usb 5-1: config 0 descriptor?? [ 519.092133][T11048] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1321'. [ 519.132216][ T8792] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 519.151290][ T8792] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 519.154287][ T8792] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 519.154364][ T8792] usb 5-1: media controller created [ 519.216119][ T8792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.335914][T11055] FAULT_INJECTION: forcing a failure. [ 519.335914][T11055] name failslab, interval 1, probability 0, space 0, times 0 [ 519.335945][T11055] CPU: 1 UID: 0 PID: 11055 Comm: syz.3.1323 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.335970][T11055] Tainted: [L]=SOFTLOCKUP [ 519.335976][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 519.335986][T11055] Call Trace: [ 519.335994][T11055] [ 519.336002][T11055] dump_stack_lvl+0xe8/0x150 [ 519.336038][T11055] should_fail_ex+0x410/0x560 [ 519.336071][T11055] should_failslab+0xa8/0x100 [ 519.336090][T11055] ? skb_clone+0x212/0x3a0 [ 519.336117][T11055] kmem_cache_alloc_noprof+0x9c/0x600 [ 519.336143][T11055] ? skb_clone+0x212/0x3a0 [ 519.336173][T11055] skb_clone+0x212/0x3a0 [ 519.336201][T11055] __netlink_deliver_tap+0x355/0x6e0 [ 519.336239][T11055] ? netlink_deliver_tap+0x2e/0x1b0 [ 519.336260][T11055] netlink_deliver_tap+0x19c/0x1b0 [ 519.336281][T11055] netlink_sendskb+0x68/0x140 [ 519.336301][T11055] netlink_rcv_skb+0x2a4/0x4a0 [ 519.336321][T11055] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 519.336414][T11055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.336445][T11055] ? bpf_lsm_capable+0x9/0x20 [ 519.336474][T11055] ? security_capable+0x7e/0x2c0 [ 519.336504][T11055] nfnetlink_rcv+0x2b9/0x28c0 [ 519.336527][T11055] ? preempt_schedule_common+0x7f/0xd0 [ 519.336551][T11055] ? __dev_queue_xmit+0x29b/0x3920 [ 519.336598][T11055] ? preempt_schedule_thunk+0x16/0x40 [ 519.336624][T11055] ? __local_bh_enable_ip+0xe9/0x140 [ 519.336644][T11055] ? __dev_queue_xmit+0x29b/0x3920 [ 519.336660][T11055] ? __dev_queue_xmit+0x1efb/0x3920 [ 519.336681][T11055] ? __dev_queue_xmit+0x29b/0x3920 [ 519.336704][T11055] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 519.336723][T11055] ? __lock_acquire+0x747/0x2de0 [ 519.336751][T11055] ? __pfx___dev_queue_xmit+0x10/0x10 [ 519.336780][T11055] ? __copy_skb_header+0xa3/0x4a0 [ 519.336810][T11055] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.336844][T11055] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.336896][T11055] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 519.336916][T11055] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 519.336955][T11055] netlink_unicast+0x8ef/0xa80 [ 519.336991][T11055] netlink_sendmsg+0x7f0/0xb20 [ 519.337017][T11055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.337036][T11055] ? aa_sock_msg_perm+0x144/0x210 [ 519.337061][T11055] ? apparmor_socket_sendmsg+0x98/0x360 [ 519.337087][T11055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.337193][T11055] sock_sendmsg_nosec+0x14e/0x190 [ 519.337215][T11055] ____sys_sendmsg+0x54e/0x850 [ 519.337234][T11055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.337253][T11055] ? import_iovec+0x73/0xa0 [ 519.337272][T11055] ___sys_sendmsg+0x2a5/0x360 [ 519.337284][T11055] ? __lock_acquire+0x747/0x2de0 [ 519.337299][T11055] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.337331][T11055] ? __fget_files+0x3a2/0x420 [ 519.337345][T11055] ? __fget_files+0x2a/0x420 [ 519.337365][T11055] __x64_sys_sendmsg+0x1b1/0x290 [ 519.337436][T11055] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.337487][T11055] do_syscall_64+0x166/0x520 [ 519.337544][T11055] ? trace_irq_disable+0x3b/0x140 [ 519.337557][T11055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.337569][T11055] ? clear_bhb_loop+0x70/0xc0 [ 519.337582][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.337592][T11055] RIP: 0033:0x7f802819f559 [ 519.337603][T11055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.337612][T11055] RSP: 002b:00007f802909b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.337624][T11055] RAX: ffffffffffffffda RBX: 00007f8028425fa0 RCX: 00007f802819f559 [ 519.337632][T11055] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 519.337639][T11055] RBP: 00007f802909b090 R08: 0000000000000000 R09: 0000000000000000 [ 519.337645][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.337651][T11055] R13: 00007f8028426038 R14: 00007f8028425fa0 R15: 00007f802854fa48 [ 519.337706][T11055] [ 519.910521][ T5709] usb 1-1: USB disconnect, device number 64 [ 520.088245][T11059] use of bytesused == 0 is deprecated and will be removed in the future, [ 520.088261][T11059] use the actual size instead. [ 520.164370][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1324'. [ 520.164396][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 520.183704][T11062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.358670][ T8792] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 520.442462][ T8792] usb 5-1: USB disconnect, device number 90 [ 520.735852][T11077] FAULT_INJECTION: forcing a failure. [ 520.735852][T11077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.735874][T11077] CPU: 1 UID: 0 PID: 11077 Comm: syz.3.1330 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.735888][T11077] Tainted: [L]=SOFTLOCKUP [ 520.735893][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 520.735899][T11077] Call Trace: [ 520.735903][T11077] [ 520.735909][T11077] dump_stack_lvl+0xe8/0x150 [ 520.735928][T11077] should_fail_ex+0x410/0x560 [ 520.735950][T11077] _copy_from_user+0x2d/0xb0 [ 520.735967][T11077] userfaultfd_rwprotect+0x106/0x560 [ 520.735984][T11077] ? __pfx_userfaultfd_rwprotect+0x10/0x10 [ 520.736006][T11077] userfaultfd_ioctl+0x42a/0x560 [ 520.736020][T11077] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 520.736032][T11077] ? __fget_files+0x2a/0x420 [ 520.736048][T11077] ? bpf_lsm_file_ioctl+0x9/0x20 [ 520.736061][T11077] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 520.736073][T11077] __se_sys_ioctl+0xfc/0x170 [ 520.736085][T11077] do_syscall_64+0x166/0x520 [ 520.736099][T11077] ? trace_irq_disable+0x3b/0x140 [ 520.736111][T11077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.736121][T11077] ? clear_bhb_loop+0x70/0xc0 [ 520.736134][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.736144][T11077] RIP: 0033:0x7f802819f559 [ 520.736154][T11077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.736163][T11077] RSP: 002b:00007f802909b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.736175][T11077] RAX: ffffffffffffffda RBX: 00007f8028425fa0 RCX: 00007f802819f559 [ 520.736183][T11077] RDX: 0000200000000040 RSI: 00000000c018aa09 RDI: 0000000000000003 [ 520.736190][T11077] RBP: 00007f802909b090 R08: 0000000000000000 R09: 0000000000000000 [ 520.736196][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.736202][T11077] R13: 00007f8028426038 R14: 00007f8028425fa0 R15: 00007f802854fa48 [ 520.736218][T11077] [ 521.210633][T11089] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 521.270390][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1335'. [ 521.318254][T11089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.405734][T11089] gretap1: entered promiscuous mode [ 521.442933][T11089] bond1: (slave gretap1): making interface the new active one [ 521.459763][T11089] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 521.468878][ T8792] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 521.615935][T11089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.634873][ T8792] usb 1-1: Using ep0 maxpacket: 16 [ 521.635388][ T8792] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.636697][ T8792] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.636709][ T8792] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.640637][ T8792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.640658][ T8792] usb 1-1: Product: syz [ 521.640672][ T8792] usb 1-1: Manufacturer: syz [ 521.640684][ T8792] usb 1-1: SerialNumber: syz [ 521.707258][ T8792] usb 1-1: 0:2 : does not exist [ 521.713757][T11089] bond1: (slave bond2): Enslaving as an active interface with a down link [ 521.861423][ T8792] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 521.943870][ T8792] usb 1-1: USB disconnect, device number 65 [ 522.029856][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 522.058210][ T30] audit: type=1326 audit(1792827875.845:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 522.058849][ T30] audit: type=1326 audit(1792827875.845:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 522.059282][ T30] audit: type=1326 audit(1792827875.845:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 522.059549][ T30] audit: type=1326 audit(1792827875.845:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 522.059761][ T30] audit: type=1326 audit(1792827875.845:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 522.060127][ T30] audit: type=1326 audit(1792827875.845:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 522.061575][ T30] audit: type=1326 audit(1792827875.845:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 522.061697][ T30] audit: type=1326 audit(1792827875.845:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 522.062068][ T30] audit: type=1326 audit(1792827875.845:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 522.297487][ T8319] udevd[8319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.298803][T11093] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1336'. [ 522.300312][ T30] audit: type=1326 audit(1792827875.925:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802819f559 code=0x7ffc0000 [ 522.991349][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'. [ 523.024162][T11100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1337'. [ 523.552002][T11103] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1338'. [ 523.571005][T11126] FAULT_INJECTION: forcing a failure. [ 523.571005][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 523.571044][T11126] CPU: 0 UID: 0 PID: 11126 Comm: syz.1.1343 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.571069][T11126] Tainted: [L]=SOFTLOCKUP [ 523.571075][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 523.571086][T11126] Call Trace: [ 523.571093][T11126] [ 523.571102][T11126] dump_stack_lvl+0xe8/0x150 [ 523.571134][T11126] should_fail_ex+0x410/0x560 [ 523.571167][T11126] should_failslab+0xa8/0x100 [ 523.571189][T11126] __kmalloc_noprof+0xf9/0x710 [ 523.571216][T11126] ? lock_acquire+0x115/0x350 [ 523.571235][T11126] ? tomoyo_encode+0x2ad/0x570 [ 523.571260][T11126] ? tomoyo_encode+0x2ad/0x570 [ 523.571292][T11126] tomoyo_encode+0x2ad/0x570 [ 523.571330][T11126] tomoyo_mount_permission+0x3a4/0x9e0 [ 523.571356][T11126] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 523.571383][T11126] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 523.571406][T11126] ? kasan_save_track+0x4f/0x80 [ 523.571484][T11126] ? kasan_quarantine_put+0xbb/0x1f0 [ 523.571512][T11126] security_sb_mount+0xe4/0x320 [ 523.571543][T11126] path_mount+0xbc/0x1050 [ 523.571570][T11126] ? user_path_at+0xd4/0x160 [ 523.571599][T11126] __se_sys_mount+0x31d/0x420 [ 523.571627][T11126] ? __pfx___se_sys_mount+0x10/0x10 [ 523.571658][T11126] ? __x64_sys_mount+0x20/0xc0 [ 523.571684][T11126] do_syscall_64+0x166/0x520 [ 523.571710][T11126] ? trace_irq_disable+0x3b/0x140 [ 523.571729][T11126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.571748][T11126] ? clear_bhb_loop+0x70/0xc0 [ 523.571769][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.571787][T11126] RIP: 0033:0x7f64df79f559 [ 523.571804][T11126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.571818][T11126] RSP: 002b:00007f64e0624028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 523.571837][T11126] RAX: ffffffffffffffda RBX: 00007f64dfa25fa0 RCX: 00007f64df79f559 [ 523.571851][T11126] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 523.571863][T11126] RBP: 00007f64e0624090 R08: 0000200000002140 R09: 0000000000000000 [ 523.571875][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.571887][T11126] R13: 00007f64dfa26038 R14: 00007f64dfa25fa0 R15: 00007f64dfb4fa48 [ 523.571918][T11126] [ 523.830602][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.832321][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.688250][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.692842][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.845756][T11153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1351'. [ 524.893961][T11153] dvmrp8: entered allmulticast mode [ 524.905297][ T5710] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 525.056297][ T5710] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 525.059192][ T5710] usb 1-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.059222][ T5710] usb 1-1: config 0 interface 0 has no altsetting 0 [ 525.059253][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.108439][ T5710] usb 1-1: config 0 descriptor?? [ 525.109132][T11139] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 525.195326][ T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 525.349962][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 525.350910][ T10] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 525.354347][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 525.362201][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.362223][ T10] usb 5-1: Product: syz [ 525.362236][ T10] usb 5-1: Manufacturer: syz [ 525.362249][ T10] usb 5-1: SerialNumber: syz [ 525.423156][ T10] usb 5-1: config 0 descriptor?? [ 525.451556][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 525.451583][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 525.503708][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.615720][ T5689] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 525.767802][ T5689] usb 3-1: Using ep0 maxpacket: 8 [ 525.769542][ T5689] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 525.790135][ T5689] usb 3-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.790199][ T5689] usb 3-1: config 0 interface 0 has no altsetting 0 [ 525.790232][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.851812][ T5689] usb 3-1: config 0 descriptor?? [ 526.058293][ T5709] usb 5-1: USB disconnect, device number 91 [ 526.107064][ T5696] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 526.185812][ T9748] udevd[9748]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.256049][ T5696] usb 4-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 526.261713][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.262197][ T5696] usb 4-1: Product: syz [ 526.262213][ T5696] usb 4-1: Manufacturer: syz [ 526.262227][ T5696] usb 4-1: SerialNumber: syz [ 526.306405][ T5696] digi_acceleport 4-1:1.0: Digi 2 port USB adapter converter detected [ 526.331878][ T5696] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 526.346852][ T5696] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 526.352881][ T5696] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 526.471284][ T5710] usbhid 1-1:0.0: can't add hid device: -71 [ 526.471367][ T5710] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 526.511035][ T5710] usb 1-1: USB disconnect, device number 66 [ 526.585191][ T2252] usb 4-1: USB disconnect, device number 90 [ 526.633736][ T5689] usbhid 3-1:0.0: can't add hid device: -71 [ 526.633833][ T5689] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 526.652515][ T2252] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 526.681079][ T5689] usb 3-1: USB disconnect, device number 65 [ 526.682082][ T2252] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 526.713621][ T2252] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 526.733242][ T2252] digi_acceleport 4-1:1.0: device disconnected [ 527.715031][ T5689] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 527.894095][ T5689] usb 1-1: not running at top speed; connect to a high speed hub [ 527.894118][ T5689] usb 1-1: New USB device found, idVendor=050d, idProduct=1103, bcdDevice=f4.cc [ 527.927352][ T5689] usb 1-1: config 8 has an invalid interface number: 119 but max is 0 [ 527.927380][ T5689] usb 1-1: config 8 has an invalid interface number: 2 but max is 0 [ 527.927398][ T5689] usb 1-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 527.927416][ T5689] usb 1-1: config 8 has no interface number 0 [ 527.927431][ T5689] usb 1-1: config 8 has no interface number 1 [ 527.927481][ T5689] usb 1-1: config 8 interface 119 altsetting 11 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 527.927505][ T5689] usb 1-1: config 8 interface 119 altsetting 11 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 527.927528][ T5689] usb 1-1: config 8 interface 119 altsetting 11 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 527.927553][ T5689] usb 1-1: config 8 interface 119 altsetting 11 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 527.927583][ T5689] usb 1-1: config 8 interface 119 altsetting 11 has a duplicate endpoint with address 0x1, skipping [ 527.927603][ T5689] usb 1-1: config 8 interface 119 altsetting 11 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 527.927627][ T5689] usb 1-1: too many endpoints for config 8 interface 2 altsetting 230: 177, using maximum allowed: 30 [ 527.927659][ T5689] usb 1-1: config 8 interface 2 altsetting 230 has a duplicate endpoint with address 0x8, skipping [ 527.927679][ T5689] usb 1-1: config 8 interface 2 altsetting 230 has 1 endpoint descriptor, different from the interface descriptor's value: 177 [ 527.927702][ T5689] usb 1-1: config 8 interface 119 has no altsetting 0 [ 527.927718][ T5689] usb 1-1: config 8 interface 2 has no altsetting 0 [ 528.103438][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.103454][ T5689] usb 1-1: Manufacturer: ﻔȮ㊞ꞻ屄᫻©够엹验隄鴏颪ㄍ반蛚䓒잀 [ 528.103463][ T5689] usb 1-1: SerialNumber: ᐌ [ 528.138579][T11182] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 528.360055][T11201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.374011][T11201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.522478][T11182] binder_alloc: 11181: binder_alloc_buf size 1024 failed, no address space [ 528.522550][T11182] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 528.645015][T11207] FAULT_INJECTION: forcing a failure. [ 528.645015][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 528.645037][T11207] CPU: 0 UID: 0 PID: 11207 Comm: syz.4.1366 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.645052][T11207] Tainted: [L]=SOFTLOCKUP [ 528.645056][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 528.645063][T11207] Call Trace: [ 528.645070][T11207] [ 528.645075][T11207] dump_stack_lvl+0xe8/0x150 [ 528.645096][T11207] should_fail_ex+0x410/0x560 [ 528.645115][T11207] should_failslab+0xa8/0x100 [ 528.645126][T11207] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 528.645139][T11207] kmem_cache_alloc_noprof+0x9c/0x600 [ 528.645152][T11207] ? __kvmalloc_node_noprof+0x340/0x820 [ 528.645166][T11207] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 528.645176][T11207] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 528.645190][T11207] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 528.645206][T11207] mmu_topup_memory_caches+0x21/0x1a0 [ 528.645245][T11207] kvm_mmu_load+0x9d/0x21e0 [ 528.645258][T11207] ? kvm_msr_allowed+0x9a/0x490 [ 528.645275][T11207] ? kvm_msr_allowed+0x9a/0x490 [ 528.645286][T11207] ? kvm_msr_allowed+0x9a/0x490 [ 528.645296][T11207] ? kvm_msr_allowed+0x3f4/0x490 [ 528.645307][T11207] ? kvm_msr_allowed+0x9a/0x490 [ 528.645317][T11207] ? kvm_apic_has_interrupt+0x740/0x770 [ 528.645338][T11207] vcpu_run+0x4f7e/0x7aa0 [ 528.645359][T11207] ? trace_pelt_se_tp+0x3b/0x150 [ 528.645399][T11207] ? __pfx_vcpu_run+0x10/0x10 [ 528.645409][T11207] ? lock_acquire+0x115/0x350 [ 528.645429][T11207] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 528.645443][T11207] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 528.645454][T11207] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 528.645469][T11207] kvm_vcpu_ioctl+0xa61/0xfd0 [ 528.645484][T11207] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 528.645507][T11207] ? __fget_files+0x2a/0x420 [ 528.645521][T11207] ? __fget_files+0x2a/0x420 [ 528.645534][T11207] ? __fget_files+0x2a/0x420 [ 528.645549][T11207] ? bpf_lsm_file_ioctl+0x9/0x20 [ 528.645561][T11207] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 528.645573][T11207] __se_sys_ioctl+0xfc/0x170 [ 528.645584][T11207] do_syscall_64+0x166/0x520 [ 528.645598][T11207] ? trace_irq_disable+0x3b/0x140 [ 528.645610][T11207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.645621][T11207] ? clear_bhb_loop+0x70/0xc0 [ 528.645634][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.645644][T11207] RIP: 0033:0x7f545519f559 [ 528.645655][T11207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.645663][T11207] RSP: 002b:00007f54560ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.645675][T11207] RAX: ffffffffffffffda RBX: 00007f5455425fa0 RCX: 00007f545519f559 [ 528.645683][T11207] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 528.645689][T11207] RBP: 00007f54560ac090 R08: 0000000000000000 R09: 0000000000000000 [ 528.645695][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.645701][T11207] R13: 00007f5455426038 R14: 00007f5455425fa0 R15: 00007f545554fa48 [ 528.645718][T11207] [ 529.207663][ T5689] usb 1-1: USB disconnect, device number 67 [ 529.617882][ T5689] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 529.771896][ T5689] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 529.775151][ T5689] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 529.775170][ T5689] usb 1-1: config 0 has no interface number 0 [ 529.812571][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.812595][ T5689] usb 1-1: Product: syz [ 529.812606][ T5689] usb 1-1: Manufacturer: syz [ 529.812618][ T5689] usb 1-1: SerialNumber: syz [ 529.842577][ T5689] usb 1-1: config 0 descriptor?? [ 530.055708][ T5689] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 530.065590][ T5689] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 530.065897][ T5689] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 530.065954][ T5689] usb 1-1: media controller created [ 530.154196][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.204283][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.219853][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.230867][T11249] netlink: zone id is out of range [ 531.230891][T11249] netlink: zone id is out of range [ 531.309072][ T5689] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 531.346372][ T5710] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 531.505410][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 531.507372][ T5710] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 531.510265][ T5710] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 531.510288][ T5710] usb 5-1: config 0 has no interface number 0 [ 531.512265][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.512287][ T5710] usb 5-1: Product: syz [ 531.512301][ T5710] usb 5-1: Manufacturer: syz [ 531.512314][ T5710] usb 5-1: SerialNumber: syz [ 531.569215][ T5710] usb 5-1: config 0 descriptor?? [ 531.580809][ T5710] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 531.787888][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 531.787906][ T30] audit: type=1800 audit(1792827885.565:4225): pid=11254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1381" name="bus" dev="tmpfs" ino=1497 res=0 errno=-22 [ 531.842005][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 532.498225][ T5689] usb 1-1: USB disconnect, device number 68 [ 533.255399][ T5696] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 533.426979][ T5696] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 533.429078][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.429108][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.519434][ T5696] as10x_usb: device has been detected [ 533.519973][ T5696] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 533.574609][ T5696] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 533.615026][ T5696] as10x_usb: error during firmware upload part1 [ 533.616026][ T5696] Registered device Abilis Systems DVB-Titan [ 534.073333][ T5710] usb 5-1: qt2_attach - failed to power on unit: -71 [ 534.073554][ T5710] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 534.122770][ T5710] usb 5-1: USB disconnect, device number 92 [ 534.276975][ T5696] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 534.394220][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1395'. [ 534.426532][ T5696] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 534.428748][ T5696] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.428762][ T5696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 534.428785][ T5696] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.428807][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.486937][ T5696] ims_pcu 3-1:1.0: Missing CDC union descriptor [ 534.486992][ T5696] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22 [ 534.545353][T11302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.546063][T11302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.695345][T11296] could not allocate digest TFM handle crc32c [ 535.405483][ T5689] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 535.556719][ T5689] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 535.562460][ T5689] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.562484][ T5689] usb 4-1: config 0 has no interface number 0 [ 535.598080][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.598105][ T5689] usb 4-1: Product: syz [ 535.598142][ T5689] usb 4-1: Manufacturer: syz [ 535.598156][ T5689] usb 4-1: SerialNumber: syz [ 535.641181][ T5689] usb 4-1: config 0 descriptor?? [ 535.848252][T11320] netlink: 'syz.1.1398': attribute type 16 has an invalid length. [ 535.848269][T11320] netlink: 'syz.1.1398': attribute type 17 has an invalid length. [ 535.866399][ T5689] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 535.925501][ T5689] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 535.925892][ T5689] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 535.925938][ T5689] usb 4-1: media controller created [ 536.232671][T11320] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 536.805986][ T5710] usb 3-1: USB disconnect, device number 66 [ 536.900442][T11335] binder: 11334:11335 ioctl 400c620e 200000000340 returned -22 [ 536.969064][T11337] binder: 11334:11337 ioctl 400c620e 200000000840 returned -22 [ 537.264841][ T5710] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 537.434938][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 537.435671][ T5710] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 537.437732][ T5710] usb 5-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.437761][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 537.437792][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.491929][ T5710] usb 5-1: config 0 descriptor?? [ 538.198637][T11348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.201895][T11348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.237780][ T5710] usbhid 5-1:0.0: can't add hid device: -71 [ 538.237846][ T5710] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 538.270372][ T5710] usb 5-1: USB disconnect, device number 93 [ 539.841724][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.944603][ T5689] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 540.158346][ T5689] usb 4-1: USB disconnect, device number 91 [ 540.181335][ T10] usb 1-1: USB disconnect, device number 69 [ 540.299847][ T10] Unregistered device Abilis Systems DVB-Titan [ 540.312017][ T10] as10x_usb: device has been disconnected [ 540.474766][ T5689] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 540.629711][ T5689] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 540.630572][ T5689] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 540.630585][ T5689] usb 4-1: config 0 has no interface number 0 [ 540.634119][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.634142][ T5689] usb 4-1: Product: syz [ 540.634155][ T5689] usb 4-1: Manufacturer: syz [ 540.634168][ T5689] usb 4-1: SerialNumber: syz [ 540.695731][ T5689] usb 4-1: config 0 descriptor?? [ 540.814888][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 540.965554][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 540.966379][ T5689] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 540.967763][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 540.971525][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 540.971548][ T10] usb 3-1: config 0 has no interface number 0 [ 541.030156][ T5689] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 541.030389][ T5689] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 541.030421][ T5689] usb 4-1: media controller created [ 541.034238][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.034261][ T10] usb 3-1: Product: syz [ 541.034274][ T10] usb 3-1: Manufacturer: syz [ 541.034287][ T10] usb 3-1: SerialNumber: syz [ 541.091327][ T10] usb 3-1: config 0 descriptor?? [ 541.107922][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 541.128351][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.349959][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 541.379332][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 541.728539][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 541.728950][ T5710] usb 3-1: USB disconnect, device number 67 [ 541.768194][ T5710] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 541.795514][ T5710] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 541.796548][ T5710] quatech2 3-1:0.51: device disconnected [ 542.265544][ T5689] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 542.288709][T11412] FAULT_INJECTION: forcing a failure. [ 542.288709][T11412] name failslab, interval 1, probability 0, space 0, times 0 [ 542.289256][T11412] CPU: 1 UID: 0 PID: 11412 Comm: syz.1.1425 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.289283][T11412] Tainted: [L]=SOFTLOCKUP [ 542.289290][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 542.289297][T11412] Call Trace: [ 542.289302][T11412] [ 542.289308][T11412] dump_stack_lvl+0xe8/0x150 [ 542.289328][T11412] should_fail_ex+0x410/0x560 [ 542.289349][T11412] should_failslab+0xa8/0x100 [ 542.289362][T11412] __kvmalloc_node_noprof+0x171/0x820 [ 542.289378][T11412] ? __kvmalloc_node_noprof+0x340/0x820 [ 542.289392][T11412] ? io_alloc_cache_init+0x42/0x140 [ 542.289404][T11412] ? io_alloc_cache_init+0x42/0x140 [ 542.289419][T11412] io_alloc_cache_init+0x42/0x140 [ 542.289432][T11412] io_ring_ctx_alloc+0x56a/0xb80 [ 542.289447][T11412] io_uring_create+0x50/0x980 [ 542.289459][T11412] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 542.289474][T11412] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 542.289495][T11412] ? rcu_is_watching+0x16/0xb0 [ 542.289515][T11412] do_syscall_64+0x166/0x520 [ 542.289529][T11412] ? trace_irq_disable+0x3b/0x140 [ 542.289541][T11412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.289551][T11412] ? clear_bhb_loop+0x70/0xc0 [ 542.289564][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.289574][T11412] RIP: 0033:0x7f64df79f559 [ 542.289585][T11412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.289594][T11412] RSP: 002b:00007f64e0623ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 542.289606][T11412] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f64df79f559 [ 542.289613][T11412] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000e26 [ 542.289622][T11412] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 542.289629][T11412] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 542.289636][T11412] R13: 0000200000000890 R14: 00007f64e0623fd8 R15: 0000000000000000 [ 542.289652][T11412] [ 542.335204][ T5710] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 542.554770][ T5710] usb 1-1: Using ep0 maxpacket: 32 [ 542.556910][ T5710] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 542.559864][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.564433][ T5710] usb 1-1: config 0 descriptor?? [ 542.599857][ T5710] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 542.719255][ T5689] usb 4-1: USB disconnect, device number 92 [ 542.793788][T11416] netlink: 'syz.1.1427': attribute type 1 has an invalid length. [ 543.080070][T11422] FAULT_INJECTION: forcing a failure. [ 543.080070][T11422] name failslab, interval 1, probability 0, space 0, times 0 [ 543.080093][T11422] CPU: 1 UID: 0 PID: 11422 Comm: syz.2.1429 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.080107][T11422] Tainted: [L]=SOFTLOCKUP [ 543.080111][T11422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 543.080117][T11422] Call Trace: [ 543.080122][T11422] [ 543.080127][T11422] dump_stack_lvl+0xe8/0x150 [ 543.080147][T11422] should_fail_ex+0x410/0x560 [ 543.080166][T11422] should_failslab+0xa8/0x100 [ 543.080177][T11422] ? skb_clone+0x212/0x3a0 [ 543.080194][T11422] kmem_cache_alloc_noprof+0x9c/0x600 [ 543.080210][T11422] ? skb_clone+0x212/0x3a0 [ 543.080227][T11422] skb_clone+0x212/0x3a0 [ 543.080240][T11422] ? can_send+0x65b/0xd30 [ 543.080334][T11422] can_send+0x679/0xd30 [ 543.080343][T11422] ? kmem_cache_alloc_noprof+0x151/0x600 [ 543.080362][T11422] ? __pfx_can_send+0x10/0x10 [ 543.080374][T11422] ? skb_ext_add+0x3b3/0x8e0 [ 543.080388][T11422] ? bcm_can_tx+0x3b3/0xba0 [ 543.080430][T11422] bcm_can_tx+0x5f3/0xba0 [ 543.080448][T11422] ? __pfx_bcm_can_tx+0x10/0x10 [ 543.080465][T11422] ? bcm_tx_setup+0xbff/0x1c00 [ 543.080476][T11422] ? hrtimer_try_to_cancel+0x1f7/0x680 [ 543.080497][T11422] bcm_tx_setup+0x127d/0x1c00 [ 543.080518][T11422] bcm_sendmsg+0x50d/0x7a0 [ 543.080532][T11422] ? __pfx_bcm_sendmsg+0x10/0x10 [ 543.080550][T11422] ? apparmor_socket_sendmsg+0x98/0x360 [ 543.080565][T11422] ? __pfx_bcm_sendmsg+0x10/0x10 [ 543.080576][T11422] sock_sendmsg_nosec+0x14e/0x190 [ 543.080590][T11422] ____sys_sendmsg+0x54e/0x850 [ 543.080607][T11422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.080625][T11422] ? import_iovec+0x73/0xa0 [ 543.080642][T11422] ___sys_sendmsg+0x2a5/0x360 [ 543.080655][T11422] ? __lock_acquire+0x747/0x2de0 [ 543.080669][T11422] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.080700][T11422] ? __fget_files+0x3a2/0x420 [ 543.080713][T11422] ? __fget_files+0x2a/0x420 [ 543.080730][T11422] __x64_sys_sendmsg+0x1b1/0x290 [ 543.080745][T11422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.080770][T11422] do_syscall_64+0x166/0x520 [ 543.080783][T11422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.080794][T11422] ? clear_bhb_loop+0x70/0xc0 [ 543.080805][T11422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.080816][T11422] RIP: 0033:0x7fd1e3f9f559 [ 543.080827][T11422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.080835][T11422] RSP: 002b:00007fd1e21f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.080847][T11422] RAX: ffffffffffffffda RBX: 00007fd1e4225fa0 RCX: 00007fd1e3f9f559 [ 543.080855][T11422] RDX: 0000000000040011 RSI: 00002000000008c0 RDI: 0000000000000003 [ 543.080861][T11422] RBP: 00007fd1e21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 543.080868][T11422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.080874][T11422] R13: 00007fd1e4226038 R14: 00007fd1e4225fa0 R15: 00007fd1e434fa48 [ 543.080890][T11422] [ 543.297939][ T5696] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 543.509189][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1431'. [ 543.528800][ T5696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 543.529456][ T5696] usb 5-1: not running at top speed; connect to a high speed hub [ 543.529510][ T5696] usb 5-1: New USB device found, idVendor=0499, idProduct=1009, bcdDevice=84.fa [ 543.533482][ T5696] usb 5-1: config 2 has an invalid interface number: 102 but max is 0 [ 543.533497][ T5696] usb 5-1: config 2 has no interface number 0 [ 543.533530][ T5696] usb 5-1: config 2 interface 102 has no altsetting 0 [ 543.585658][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.585683][ T5696] usb 5-1: Product: ᒵ늾稢혮곇晐雟踃荸藊☠㇋䒺肵댑鐱髚綋㏗嘍횭㰒㳆翈槺箂蠟쟱࠶䩊안皃鲽멯㕼珪녃ꡟ坋綻誯廋煌̔잞캈轍鲄倐㜕逳㬟ៗ꒚협᩠ⷔ졨᠐꼯饐戎춰矸੹杨儋輁䋧㰌窕㯐 [ 543.585733][ T5696] usb 5-1: Manufacturer: ဌ [ 543.585748][ T5696] usb 5-1: SerialNumber: ⑚웨ే࿧ⶔፋ윕鬓ᦵ붸朠蟢쎰쁖ヾ喿㶗ᕦ肥敡鮿赻載撍᲍ﭜ༧흂뿛톳쮇贉튈㍊ံ匞玪ꯥ鵛≣䔖饧깵껍ヂ윬莧믚䉉環龇胅᛿ꍫ儏ᾏ튣℡䐦䤂㯖࿛ᄶ鶣뒹≘곍꛽诸最 [ 543.765870][T11426] FAULT_INJECTION: forcing a failure. [ 543.765870][T11426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.765903][T11426] CPU: 0 UID: 0 PID: 11426 Comm: syz.3.1430 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.765927][T11426] Tainted: [L]=SOFTLOCKUP [ 543.765935][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 543.765946][T11426] Call Trace: [ 543.765954][T11426] [ 543.765963][T11426] dump_stack_lvl+0xe8/0x150 [ 543.765996][T11426] should_fail_ex+0x410/0x560 [ 543.766029][T11426] _copy_from_user+0x2d/0xb0 [ 543.766060][T11426] snd_ctl_ioctl+0x3cf/0x1e00 [ 543.766185][T11426] ? stack_trace_save+0xa9/0x100 [ 543.766206][T11426] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 543.766228][T11426] ? kasan_save_track+0x4f/0x80 [ 543.766259][T11426] ? stack_depot_save_flags+0x33/0x7f0 [ 543.766286][T11426] ? __lock_acquire+0x747/0x2de0 [ 543.766310][T11426] ? kasan_save_track+0x4f/0x80 [ 543.766329][T11426] ? kasan_save_track+0x3e/0x80 [ 543.766354][T11426] ? kasan_save_free_info+0x40/0x50 [ 543.766375][T11426] ? __kasan_slab_free+0x5c/0x80 [ 543.766391][T11426] ? kfree+0x1c5/0x650 [ 543.766411][T11426] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 543.766432][T11426] ? security_file_ioctl+0xc3/0x2a0 [ 543.766451][T11426] ? __se_sys_ioctl+0x47/0x170 [ 543.766468][T11426] ? do_syscall_64+0x166/0x520 [ 543.766493][T11426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.766554][T11426] ? kasan_quarantine_put+0xbb/0x1f0 [ 543.766589][T11426] ? tomoyo_path_number_perm+0x219/0x5f0 [ 543.766611][T11426] ? tomoyo_path_number_perm+0x219/0x5f0 [ 543.766637][T11426] ? do_vfs_ioctl+0x116f/0x1530 [ 543.766661][T11426] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 543.766720][T11426] ? __fget_files+0x2a/0x420 [ 543.766745][T11426] ? __fget_files+0x2a/0x420 [ 543.766773][T11426] ? bpf_lsm_file_ioctl+0x9/0x20 [ 543.766793][T11426] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 543.766824][T11426] __se_sys_ioctl+0xfc/0x170 [ 543.766844][T11426] do_syscall_64+0x166/0x520 [ 543.766868][T11426] ? trace_irq_disable+0x3b/0x140 [ 543.766890][T11426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.766908][T11426] ? clear_bhb_loop+0x70/0xc0 [ 543.766932][T11426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.766950][T11426] RIP: 0033:0x7f802819f559 [ 543.766968][T11426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.766983][T11426] RSP: 002b:00007f802909b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.767003][T11426] RAX: ffffffffffffffda RBX: 00007f8028425fa0 RCX: 00007f802819f559 [ 543.767017][T11426] RDX: 0000200000000440 RSI: 00000000c0505510 RDI: 0000000000000003 [ 543.767030][T11426] RBP: 00007f802909b090 R08: 0000000000000000 R09: 0000000000000000 [ 543.767042][T11426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.767053][T11426] R13: 00007f8028426038 R14: 00007f8028425fa0 R15: 00007f802854fa48 [ 543.767085][T11426] [ 544.163063][ T5710] gspca_vc032x: reg_w err -71 [ 544.163081][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163091][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163100][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163107][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163114][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163122][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163130][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163138][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163147][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163155][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163163][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163194][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163203][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163211][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163219][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163227][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163235][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163243][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.163251][ T5710] gspca_vc032x: Unknown sensor... [ 544.163354][ T5710] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 544.285411][ T5710] usb 1-1: USB disconnect, device number 70 [ 544.925447][ T1222] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 545.120143][ T1222] usb 4-1: Using ep0 maxpacket: 32 [ 545.131123][ T1222] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 545.132861][ T1222] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 545.132876][ T1222] usb 4-1: config 0 has no interface number 0 [ 545.182264][ T1222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.182280][ T1222] usb 4-1: Product: syz [ 545.182288][ T1222] usb 4-1: Manufacturer: syz [ 545.182295][ T1222] usb 4-1: SerialNumber: syz [ 545.212114][ T1222] usb 4-1: config 0 descriptor?? [ 545.230755][ T1222] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 545.543834][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'. [ 545.661769][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.682625][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.706920][T11448] bond3: entered promiscuous mode [ 545.709913][T11448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 545.848407][ T1222] usb 4-1: qt2_attach - failed to power on unit: -71 [ 545.848573][ T1222] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 545.883587][ T1222] usb 4-1: USB disconnect, device number 93 [ 545.948096][T11448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 545.948442][T11448] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 545.958048][T11448] bond3: (slave sit1): Error -95 calling set_mac_address [ 546.048543][ T5696] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 546.139442][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 546.156149][ T5696] snd-usb-audio 5-1:2.102: probe with driver snd-usb-audio failed with error -2 [ 546.158759][ T5696] usb 5-1: USB disconnect, device number 94 [ 546.281148][ T8319] udevd[8319]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.102/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.294796][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 546.295604][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 546.314668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 546.329794][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 546.329821][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 546.345007][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.345030][ T10] usb 3-1: Product: syz [ 546.345044][ T10] usb 3-1: Manufacturer: syz [ 546.345058][ T10] usb 3-1: SerialNumber: syz [ 546.396787][ T10] usb 3-1: config 0 descriptor?? [ 546.429216][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 546.429248][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 546.519259][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.519757][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.770037][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.770325][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.109247][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 547.121863][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 547.124437][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 547.134056][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 547.559560][T11466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.559805][T11466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.703542][T11468] netlink: zone id is out of range [ 547.703582][T11468] netlink: zone id is out of range [ 548.607252][ T10] usb 3-1: USB disconnect, device number 68 [ 548.632815][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 548.657500][T11480] FAULT_INJECTION: forcing a failure. [ 548.657500][T11480] name failslab, interval 1, probability 0, space 0, times 0 [ 548.657523][T11480] CPU: 0 UID: 0 PID: 11480 Comm: syz.3.1449 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.657537][T11480] Tainted: [L]=SOFTLOCKUP [ 548.657541][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 548.657547][T11480] Call Trace: [ 548.657552][T11480] [ 548.657557][T11480] dump_stack_lvl+0xe8/0x150 [ 548.657578][T11480] should_fail_ex+0x410/0x560 [ 548.657596][T11480] should_failslab+0xa8/0x100 [ 548.657608][T11480] ? skb_clone+0x212/0x3a0 [ 548.657624][T11480] kmem_cache_alloc_noprof+0x9c/0x600 [ 548.657639][T11480] ? skb_clone+0x212/0x3a0 [ 548.657656][T11480] skb_clone+0x212/0x3a0 [ 548.657672][T11480] __netlink_deliver_tap+0x355/0x6e0 [ 548.657690][T11480] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.657703][T11480] netlink_deliver_tap+0x19c/0x1b0 [ 548.657715][T11480] __netlink_sendskb+0x47/0x90 [ 548.657726][T11480] netlink_dump+0xa8c/0xee0 [ 548.657744][T11480] ? __pfx_netlink_dump+0x10/0x10 [ 548.657761][T11480] ? genl_start+0x497/0x6d0 [ 548.657778][T11480] __netlink_dump_start+0x589/0x7b0 [ 548.657793][T11480] genl_family_rcv_msg_dumpit+0x213/0x310 [ 548.657809][T11480] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 548.657844][T11480] ? __pfx_genl_start+0x10/0x10 [ 548.657857][T11480] ? __pfx_genl_dumpit+0x10/0x10 [ 548.657868][T11480] ? __pfx_genl_done+0x10/0x10 [ 548.657884][T11480] ? bpf_lsm_capable+0x9/0x20 [ 548.657897][T11480] ? security_capable+0x7e/0x2c0 [ 548.657919][T11480] genl_rcv_msg+0x5e1/0x7a0 [ 548.657937][T11480] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.657950][T11480] ? __pfx_batadv_orig_dump+0x10/0x10 [ 548.658049][T11480] netlink_rcv_skb+0x226/0x4a0 [ 548.658061][T11480] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.658076][T11480] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.658096][T11480] ? down_read+0x2b9/0x320 [ 548.658108][T11480] genl_rcv+0x28/0x40 [ 548.658120][T11480] netlink_unicast+0x8ef/0xa80 [ 548.658146][T11480] netlink_sendmsg+0x7f0/0xb20 [ 548.658172][T11480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.658196][T11480] ? aa_sock_msg_perm+0x144/0x210 [ 548.658214][T11480] ? apparmor_socket_sendmsg+0x98/0x360 [ 548.658227][T11480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.658238][T11480] sock_sendmsg_nosec+0x14e/0x190 [ 548.658252][T11480] sock_sendmsg+0x1ca/0x2d0 [ 548.658263][T11480] ? __lock_acquire+0x747/0x2de0 [ 548.658277][T11480] ? __pfx_sock_sendmsg+0x10/0x10 [ 548.658295][T11480] ? __asan_memset+0x22/0x50 [ 548.658309][T11480] ? iov_iter_bvec+0xb8/0x180 [ 548.658325][T11480] splice_to_socket+0xc4d/0x1460 [ 548.658354][T11480] ? __pfx_splice_to_socket+0x10/0x10 [ 548.658393][T11480] ? __pfx_splice_to_socket+0x10/0x10 [ 548.658406][T11480] direct_splice_actor+0x101/0x160 [ 548.658426][T11480] splice_direct_to_actor+0x57b/0xcb0 [ 548.658451][T11480] ? __pfx_direct_splice_actor+0x10/0x10 [ 548.658464][T11480] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 548.658483][T11480] do_splice_direct+0x195/0x290 [ 548.658498][T11480] ? __pfx_do_splice_direct+0x10/0x10 [ 548.658512][T11480] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 548.658528][T11480] ? bpf_lsm_file_permission+0x9/0x20 [ 548.658539][T11480] ? security_file_permission+0x75/0x260 [ 548.658551][T11480] ? rw_verify_area+0x203/0x4c0 [ 548.658565][T11480] ? fdget+0x1ac/0x250 [ 548.658579][T11480] do_sendfile+0x52e/0x7c0 [ 548.658595][T11480] ? __pfx_do_sendfile+0x10/0x10 [ 548.658607][T11480] ? fdget+0x1ac/0x250 [ 548.658623][T11480] __se_sys_sendfile64+0x144/0x1a0 [ 548.658635][T11480] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 548.658653][T11480] do_syscall_64+0x166/0x520 [ 548.658666][T11480] ? trace_irq_disable+0x3b/0x140 [ 548.658678][T11480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.658689][T11480] ? clear_bhb_loop+0x70/0xc0 [ 548.658701][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.658711][T11480] RIP: 0033:0x7f802819f559 [ 548.658723][T11480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.658731][T11480] RSP: 002b:00007f802909b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 548.658743][T11480] RAX: ffffffffffffffda RBX: 00007f8028425fa0 RCX: 00007f802819f559 [ 548.658751][T11480] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000b [ 548.658757][T11480] RBP: 00007f802909b090 R08: 0000000000000000 R09: 0000000000000000 [ 548.658763][T11480] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.658769][T11480] R13: 00007f8028426038 R14: 00007f8028425fa0 R15: 00007f802854fa48 [ 548.658787][T11480] [ 548.718875][ T5710] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 548.971739][ T5710] usb 5-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 549.144052][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.144076][ T5710] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.165607][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 549.165630][ T5710] usb 5-1: SerialNumber: syz [ 549.208927][ T10] em28xx: Freeing device [ 549.336459][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 549.421445][T11482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 549.490777][ T5710] usb 5-1: 0:2 : does not exist [ 549.537285][ T5710] usb 5-1: USB disconnect, device number 95 [ 549.596555][ T5689] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 549.636942][ T8319] udevd[8319]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.744812][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 549.747127][ T5689] usb 4-1: unable to get BOS descriptor or descriptor too short [ 549.747174][ T5689] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 549.774270][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.774301][ T5689] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 549.804012][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.804028][ T5689] usb 4-1: Product: syz [ 549.804036][ T5689] usb 4-1: Manufacturer: syz [ 549.804043][ T5689] usb 4-1: SerialNumber: syz [ 549.833521][T11492] ------------[ cut here ]------------ [ 549.833532][T11492] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 549.833548][T11492] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1506/0x1700, CPU#0: syz.1.1454/11492 [ 549.858186][T11492] Modules linked in: [ 549.862096][T11492] CPU: 0 UID: 0 PID: 11492 Comm: syz.1.1454 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.873227][T11492] Tainted: [L]=SOFTLOCKUP [ 549.877566][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 549.887691][T11492] RIP: 0010:__kvm_gpc_refresh+0x1506/0x1700 [ 549.893569][T11492] Code: c6 05 65 f5 24 10 01 48 c7 c7 b1 5f 47 8e be 43 04 00 00 48 c7 c2 80 44 02 8c e8 d5 b7 62 00 e9 8b ee ff ff e8 fb 5a 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 55 f6 ff [ 549.913450][T11492] RSP: 0018:ffffc900037ef360 EFLAGS: 00010293 [ 549.919571][T11492] RAX: ffffffff81411605 RBX: ffff888000000000 RCX: ffff88801f70be80 [ 549.927556][T11492] RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000 [ 549.935644][T11492] RBP: ffffc900037ef4e8 R08: ffffffff917cd0bf R09: 1ffffffff22f9a17 [ 549.943602][T11492] R10: dffffc0000000000 R11: fffffbfff22f9a18 R12: 1ffff920006fde80 [ 549.951871][T11492] R13: ffff888056b15b60 R14: ffff888000000000 R15: ffffffffffffff01 [ 549.959901][T11492] FS: 00007f64e06036c0(0000) GS:ffff888123a50000(0000) knlGS:0000000000000000 [ 549.968844][T11492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.975450][T11492] CR2: 00007f64e05c1d58 CR3: 00000000561fe000 CR4: 00000000003526f0 [ 549.983413][T11492] Call Trace: [ 549.986725][T11492] [ 549.989671][T11492] ? lock_acquire+0x115/0x350 [ 549.994364][T11492] ? kvm_gpc_refresh+0x31/0x110 [ 549.999286][T11492] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 550.004801][T11492] kvm_gpc_refresh+0xe1/0x110 [ 550.009465][T11492] ? kvm_xen_set_evtchn+0x11e/0x220 [ 550.014721][T11492] kvm_xen_set_evtchn+0x14f/0x220 [ 550.019756][T11492] kvm_xen_vcpu_get_attr+0x5b0/0xb20 [ 550.025130][T11492] kvm_arch_vcpu_ioctl+0x1552/0x23a0 [ 550.030407][T11492] ? lock_acquire+0x115/0x350 [ 550.035121][T11492] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 550.040799][T11492] ? lock_acquire+0x115/0x350 [ 550.045516][T11492] ? is_bpf_text_address+0x26/0x2b0 [ 550.050721][T11492] ? is_bpf_text_address+0x292/0x2b0 [ 550.056114][T11492] ? is_bpf_text_address+0x26/0x2b0 [ 550.061323][T11492] ? kernel_text_address+0xa5/0xe0 [ 550.066447][T11492] ? __kernel_text_address+0xd/0x30 [ 550.071632][T11492] ? unwind_get_return_address+0x4d/0x90 [ 550.077290][T11492] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 550.083432][T11492] ? arch_stack_walk+0xfb/0x150 [ 550.088313][T11492] ? stack_trace_save+0xa9/0x100 [ 550.093246][T11492] ? __pfx_stack_trace_save+0x10/0x10 [ 550.098652][T11492] ? kasan_save_track+0x4f/0x80 [ 550.103528][T11492] ? stack_depot_save_flags+0x33/0x7f0 [ 550.109286][T11492] ? __lock_acquire+0x747/0x2de0 [ 550.114232][T11492] ? kfree+0x1c5/0x650 [ 550.118317][T11492] ? __se_sys_ioctl+0x47/0x170 [ 550.123082][T11492] ? do_syscall_64+0x166/0x520 [ 550.127868][T11492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.133981][T11492] ? __mutex_trylock_common+0x15f/0x270 [ 550.139540][T11492] ? __pfx___mutex_trylock_common+0x10/0x10 [ 550.145505][T11492] ? rcu_is_watching+0x16/0xb0 [ 550.150259][T11492] ? trace_contention_end+0x3d/0x140 [ 550.156114][T11492] ? __mutex_lock+0x305/0x15a0 [ 550.160896][T11492] ? kasan_quarantine_put+0xbb/0x1f0 [ 550.166255][T11492] ? __pfx___mutex_lock+0x10/0x10 [ 550.171309][T11492] ? tomoyo_path_number_perm+0x219/0x5f0 [ 550.176992][T11492] ? do_vfs_ioctl+0x116f/0x1530 [ 550.181832][T11492] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 550.187026][T11492] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 550.191716][T11492] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 550.196939][T11492] ? do_futex+0x3e7/0x4e0 [ 550.201255][T11492] ? lockdep_hardirqs_on+0x7b/0x110 [ 550.206473][T11492] ? __fget_files+0x2a/0x420 [ 550.211048][T11492] ? __fget_files+0x2a/0x420 [ 550.215650][T11492] ? __fget_files+0x2a/0x420 [ 550.220260][T11492] ? bpf_lsm_file_ioctl+0x9/0x20 [ 550.225232][T11492] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 550.230425][T11492] __se_sys_ioctl+0xfc/0x170 [ 550.235064][T11492] do_syscall_64+0x166/0x520 [ 550.239663][T11492] ? trace_irq_disable+0x3b/0x140 [ 550.244727][T11492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.250783][T11492] ? clear_bhb_loop+0x70/0xc0 [ 550.255489][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.261370][T11492] RIP: 0033:0x7f64df79f559 [ 550.265799][T11492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.285455][T11492] RSP: 002b:00007f64e0603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 550.293875][T11492] RAX: ffffffffffffffda RBX: 00007f64dfa26090 RCX: 00007f64df79f559 [ 550.301894][T11492] RDX: 0000200000000480 RSI: 00000000c048aeca RDI: 0000000000000047 [ 550.309895][T11492] RBP: 00007f64df836b20 R08: 0000000000000000 R09: 0000000000000000 [ 550.317899][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.325987][T11492] R13: 00007f64dfa26128 R14: 00007f64dfa26090 R15: 00007f64dfb4fa48 [ 550.333955][T11492] [ 550.337064][T11492] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 550.344328][T11492] CPU: 0 UID: 0 PID: 11492 Comm: syz.1.1454 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.355327][T11492] Tainted: [L]=SOFTLOCKUP [ 550.359632][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 550.369676][T11492] Call Trace: [ 550.372957][T11492] [ 550.375887][T11492] vpanic+0x56d/0xa60 [ 550.379858][T11492] ? __pfx__printk+0x10/0x10 [ 550.384451][T11492] ? __pfx_vpanic+0x10/0x10 [ 550.388939][T11492] ? is_bpf_text_address+0x292/0x2b0 [ 550.394234][T11492] ? is_bpf_text_address+0x26/0x2b0 [ 550.399429][T11492] panic+0xc5/0xd0 [ 550.403139][T11492] ? __pfx_panic+0x10/0x10 [ 550.407551][T11492] __warn+0x315/0x4c0 [ 550.411516][T11492] ? __kvm_gpc_refresh+0x1506/0x1700 [ 550.416784][T11492] ? __kvm_gpc_refresh+0x1506/0x1700 [ 550.422049][T11492] __report_bug+0x276/0x570 [ 550.426678][T11492] ? check_path+0x21/0x40 [ 550.430991][T11492] ? __kvm_gpc_refresh+0x1506/0x1700 [ 550.436256][T11492] ? __pfx___report_bug+0x10/0x10 [ 550.441268][T11492] ? lockdep_unlock+0x5c/0xd0 [ 550.445939][T11492] ? __lock_acquire+0x1511/0x2de0 [ 550.450949][T11492] ? __bfs+0x153/0x290 [ 550.455023][T11492] ? __kvm_gpc_refresh+0x1506/0x1700 [ 550.460289][T11492] report_bug+0x16b/0x220 [ 550.464608][T11492] ? __kvm_gpc_refresh+0x1506/0x1700 [ 550.469879][T11492] ? __kvm_gpc_refresh+0x1508/0x1700 [ 550.475144][T11492] handle_bug+0x9c/0x200 [ 550.479368][T11492] exc_invalid_op+0x1a/0x50 [ 550.483855][T11492] asm_exc_invalid_op+0x1a/0x20 [ 550.488684][T11492] RIP: 0010:__kvm_gpc_refresh+0x1506/0x1700 [ 550.494559][T11492] Code: c6 05 65 f5 24 10 01 48 c7 c7 b1 5f 47 8e be 43 04 00 00 48 c7 c2 80 44 02 8c e8 d5 b7 62 00 e9 8b ee ff ff e8 fb 5a 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 55 f6 ff [ 550.514143][T11492] RSP: 0018:ffffc900037ef360 EFLAGS: 00010293 [ 550.520191][T11492] RAX: ffffffff81411605 RBX: ffff888000000000 RCX: ffff88801f70be80 [ 550.528142][T11492] RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000 [ 550.536095][T11492] RBP: ffffc900037ef4e8 R08: ffffffff917cd0bf R09: 1ffffffff22f9a17 [ 550.544048][T11492] R10: dffffc0000000000 R11: fffffbfff22f9a18 R12: 1ffff920006fde80 [ 550.552000][T11492] R13: ffff888056b15b60 R14: ffff888000000000 R15: ffffffffffffff01 [ 550.559969][T11492] ? __kvm_gpc_refresh+0x1505/0x1700 [ 550.565257][T11492] ? lock_acquire+0x115/0x350 [ 550.569922][T11492] ? kvm_gpc_refresh+0x31/0x110 [ 550.574762][T11492] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 550.580218][T11492] kvm_gpc_refresh+0xe1/0x110 [ 550.584880][T11492] ? kvm_xen_set_evtchn+0x11e/0x220 [ 550.590064][T11492] kvm_xen_set_evtchn+0x14f/0x220 [ 550.595082][T11492] kvm_xen_vcpu_get_attr+0x5b0/0xb20 [ 550.600362][T11492] kvm_arch_vcpu_ioctl+0x1552/0x23a0 [ 550.605635][T11492] ? lock_acquire+0x115/0x350 [ 550.610295][T11492] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 550.615915][T11492] ? lock_acquire+0x115/0x350 [ 550.620578][T11492] ? is_bpf_text_address+0x26/0x2b0 [ 550.625765][T11492] ? is_bpf_text_address+0x292/0x2b0 [ 550.631035][T11492] ? is_bpf_text_address+0x26/0x2b0 [ 550.636235][T11492] ? kernel_text_address+0xa5/0xe0 [ 550.641327][T11492] ? __kernel_text_address+0xd/0x30 [ 550.646505][T11492] ? unwind_get_return_address+0x4d/0x90 [ 550.652122][T11492] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 550.658258][T11492] ? arch_stack_walk+0xfb/0x150 [ 550.663102][T11492] ? stack_trace_save+0xa9/0x100 [ 550.668025][T11492] ? __pfx_stack_trace_save+0x10/0x10 [ 550.673376][T11492] ? kasan_save_track+0x4f/0x80 [ 550.678213][T11492] ? stack_depot_save_flags+0x33/0x7f0 [ 550.683662][T11492] ? __lock_acquire+0x747/0x2de0 [ 550.688594][T11492] ? kfree+0x1c5/0x650 [ 550.692683][T11492] ? __se_sys_ioctl+0x47/0x170 [ 550.697436][T11492] ? do_syscall_64+0x166/0x520 [ 550.702192][T11492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.708253][T11492] ? __mutex_trylock_common+0x15f/0x270 [ 550.713788][T11492] ? __pfx___mutex_trylock_common+0x10/0x10 [ 550.719670][T11492] ? rcu_is_watching+0x16/0xb0 [ 550.724421][T11492] ? trace_contention_end+0x3d/0x140 [ 550.729693][T11492] ? __mutex_lock+0x305/0x15a0 [ 550.734472][T11492] ? kasan_quarantine_put+0xbb/0x1f0 [ 550.739749][T11492] ? __pfx___mutex_lock+0x10/0x10 [ 550.744766][T11492] ? tomoyo_path_number_perm+0x219/0x5f0 [ 550.750405][T11492] ? do_vfs_ioctl+0x116f/0x1530 [ 550.755248][T11492] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 550.760272][T11492] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 550.764947][T11492] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 550.770147][T11492] ? do_futex+0x3e7/0x4e0 [ 550.774465][T11492] ? lockdep_hardirqs_on+0x7b/0x110 [ 550.779664][T11492] ? __fget_files+0x2a/0x420 [ 550.784240][T11492] ? __fget_files+0x2a/0x420 [ 550.788817][T11492] ? __fget_files+0x2a/0x420 [ 550.793394][T11492] ? bpf_lsm_file_ioctl+0x9/0x20 [ 550.798337][T11492] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 550.803519][T11492] __se_sys_ioctl+0xfc/0x170 [ 550.808113][T11492] do_syscall_64+0x166/0x520 [ 550.812690][T11492] ? trace_irq_disable+0x3b/0x140 [ 550.817699][T11492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.823751][T11492] ? clear_bhb_loop+0x70/0xc0 [ 550.828411][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.834288][T11492] RIP: 0033:0x7f64df79f559 [ 550.838685][T11492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.858276][T11492] RSP: 002b:00007f64e0603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 550.866685][T11492] RAX: ffffffffffffffda RBX: 00007f64dfa26090 RCX: 00007f64df79f559 [ 550.874645][T11492] RDX: 0000200000000480 RSI: 00000000c048aeca RDI: 0000000000000047 [ 550.882621][T11492] RBP: 00007f64df836b20 R08: 0000000000000000 R09: 0000000000000000 [ 550.890580][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.898548][T11492] R13: 00007f64dfa26128 R14: 00007f64dfa26090 R15: 00007f64dfb4fa48 [ 550.906534][T11492] [ 550.909812][T11492] Kernel Offset: disabled [ 550.914126][T11492] Rebooting in 86400 seconds..