last executing test programs: 6.779419345s ago: executing program 1 (id=1882): userfaultfd(0x801) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6_sctp(0xa, 0x5, 0x84) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) 6.368761883s ago: executing program 1 (id=1885): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5d57c1efa65c6c9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xf3d}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20004004}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r6, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x3f, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xac, 0x8}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0x4, 0x0, 0x6f, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xf9, 0x1}}, @cf={0x4, 0x6, {0x6, 0x3, 0x35e, 0x9}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x38}}, @channel_switch={0x25, 0x3, {0x1, 0xb2, 0x8}}, @ssid={0x0, 0x1, @random='@'}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7f43}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x94}}, 0x0) io_uring_enter(r7, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r13 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSMASK(r13, 0x40104593, &(0x7f0000000100)={0x3, 0x1, &(0x7f0000000040)="cb"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000500)={0x0, @bt={0xa00, 0x642, 0x0, 0x2800, 0xd59f83, 0x19f2, 0x3, 0x6, 0x3, 0x5, 0x2800, 0x2800, 0x2, 0x100, 0xa, 0x27, {0x8, 0xffffffff}, 0xd0, 0x9}}) 5.835173461s ago: executing program 1 (id=1888): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x5, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x68, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x1, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0xffffffff, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x2, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x6, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x3ff, 0x4, 0x70a, 0x7fffffff}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0x1, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0x8, 0x62182213, 0x8, 0x8000, 0x8f4c}, {0x36b, 0xb6, 0x0, 0x5f60be42, 0x8, 0x7}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x3, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0x3, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x200, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x4, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x7, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0xffffffff}, {0x8, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x4, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x0, 0x3, 0x8000, 0x3fd}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0xb, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0x5}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0xebbc}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x1006, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x4, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x2}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe88000000000000000000000000000100000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000010000000000000000080000000000000000000000000000000000000000000000000000001d000000000000007f00000000000000990c0000000000000000000000000000dd020000000000000000ffffff800000010100020000000084010500ac141439000000000000000000000000000004d32b00000000000000ac14140c00"/165], 0x23c}}, 0x40044) 5.662752041s ago: executing program 1 (id=1889): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="114353012008ba00000037510800", 0xe, 0x4008085, &(0x7f00000000c0)={0x11, 0x10, r2, 0x1, 0x7, 0x6, @local}, 0x14) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r3], 0x48}}, 0x2404c054) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0xc, 0x4007, @fd=r4, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0105b08, &(0x7f0000000040)) readv(r3, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x0, 0x238, 0xffffffff, 0x190, 0x2e0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x92, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @empty, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast2, @broadcast, 0x0, 0xffffff00, 'bridge_slave_1\x00', 'veth1_vlan\x00', {}, {}, 0x5c, 0x0, 0x2f}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @icmp_id=0x65, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 5.043757723s ago: executing program 2 (id=1892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x3, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x42) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r8, 0x0, 0x4, 0x808a}) (async) r9 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r9, 0x80106f53, &(0x7f00000024c0)={0x9, &(0x7f0000002200)=[{0x26, '\x00', @st={0x4, [{0x3, @svalue=0xe}, {0x1, @svalue=0x7}, {0x0, @uvalue=0x101}, {0x3, @svalue=0x7}]}, 0xc00000}, {0xd, '\x00', @st={0x4, [{0x3, @svalue=0xfda}, {0x0, @svalue=0x2}, {0x2, @svalue=0x6}, {0x0, @svalue=0x1}]}, 0x74}, {0x2f, '\x00', @data, 0x2}, {0x9, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @uvalue=0x3a5}, {0x1, @svalue=0xb}, {0x5d1ae71d15d461ec, @uvalue=0x7}]}, 0x6}, {0x16, '\x00', @buffer={"6286ae8c1979f873ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x367}, {0x39, '\x00', @st={0x4, [{0x0, @uvalue=0x8000000000000001}, {0x2, @svalue=0x4}, {0x1, @svalue}, {0x2, @uvalue=0x3ff}]}, 0x1b}, {0x1c, '\x00', @data=0x7fffffff, 0x7}, {0x2a, '\x00', @st={0x4, [{0x2, @uvalue=0x9}, {0x0, @svalue=0xffffffffffffffff}, {0x3, @svalue}, {0x1, @svalue=0x3ff}]}, 0x3}]}) (async) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r10, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xe, 0x87, 0x0, 0x401000000000081, 0x2, 0x3e, 0xfffffff9, 0x3bf, 0x40, 0x103, 0xd35, 0x5, 0x38, 0x1, 0x78, 0x7}, [{0x2, 0x3, 0x1, 0x7, 0xc2d, 0xaf, 0x3, 0x8}]}, 0x78) (async) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_CONTINUE(r11, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) close(r10) (async) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff2}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000000c0)={0xffffffffffffff07, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x116, &(0x7f0000000440)="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"}) 3.890020539s ago: executing program 3 (id=1898): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_init1(0x800) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000002c0)={0x1, 0x2, 0x81, 0x3, 0x9, "83e0796003008bdf9c0000000000000600"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = msgget(0x1, 0x209) msgrcv(r3, 0x0, 0x0, 0x2, 0x1000) msgrcv(r3, 0x0, 0x0, 0x1, 0x1000) msgsnd(r3, &(0x7f0000000bc0)={0x1}, 0x8, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x1, 0x3, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x77}}}, &(0x7f00000001c0)=0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x244000, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0xb44c, 0x1, 0x3, 0x178}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x12b6, 0x1000, 0x1, 0x8a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9259, 0x1000, 0x1, 0xea}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5d03, 0x4, 0x3, 0x203}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe409, 0x10, 0x1, 0x1e2}, 0xffffffffffffffff}], 0x4, &(0x7f0000002640)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, 0x0, '\x00', {0x0, 0x782, 0x0, &(0x7f0000001640)=@buf_max_buf="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"}}, &(0x7f00000026c0)) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002980), 0x0, 0x40000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r5, r6, &(0x7f0000000300)={0x0, 0xf7a7, 0x20000, 0x3, 0x61, 0x0, r7}, &(0x7f0000002700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f8f, 0x800, 0x1, 0x229}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4161, 0x2040, 0x1, 0x3a3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x470e, 0x20, 0x1, 0x204, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf8a5, 0x20, 0x2, 0x22c, 0x0, r2}}], 0x4, &(0x7f00000039c0)={0x2e, 0x1, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xbd20}, 0x0, r10, '\x00', {0x0, 0xd97, 0x0, &(0x7f00000029c0)=@buf_512="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"}}, &(0x7f0000003a40)) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x642, 0x0, 0x2800, 0xd59f83, 0x19f2, 0x3, 0x2000006, 0x3, 0x5, 0x2800, 0x2800, 0x2, 0x100, 0xa, 0x27, {0x8, 0xffffffff}, 0xd0, 0x9}}) 3.658944117s ago: executing program 4 (id=1900): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20101) r2 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x9000001c}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) read$FUSE(r6, 0x0, 0x2f) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000118}]}) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 3.577029955s ago: executing program 2 (id=1901): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) shutdown(0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) (async) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r1, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="c3", 0x1}]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.320949665s ago: executing program 2 (id=1902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0x3, 0x4000000, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (fail_nth: 1) 2.907859101s ago: executing program 2 (id=1903): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x9) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000002a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000018000000000000001701"], 0x30, 0x4000804}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50b"], 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x891a, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @multicast2}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) syz_open_dev$sndmidi(&(0x7f0000000080), 0x7fff, 0x20000) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x480) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x6}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2.905151673s ago: executing program 3 (id=1904): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c800000010102030109022e0001010080fa0904"], 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYRESHEX=r2], 0x40}, 0x1, 0x0, 0x0, 0x40094}, 0x4000000) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.281726897s ago: executing program 1 (id=1905): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) sendto$inet6(r0, &(0x7f0000000000)="799c", 0x2, 0x14, 0x0, 0x0) (fail_nth: 1) 1.977642594s ago: executing program 3 (id=1906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x5, 0x6de1, 0xe, 0x8}) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r10, &(0x7f0000003480)=ANY=[@ANYBLOB="0800080006000600080014000000450f0fd400680000f9329078ac1414aa64010102", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0xfe2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000340)={0xf5c5, "26f4a040b39a263dac3708713bb259c932defdaa7b16cd105e67c4a136e4b926", 0x0, 0x1}) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 1.818983087s ago: executing program 1 (id=1908): syz_usb_connect(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8042800, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r2 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc07e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003880)=[{{&(0x7f00000003c0)=@ll={0x11, 0x6, 0x0, 0x1, 0xe}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="5a3dca5f30ca0dd052f177231c55ccfac2cfc3f177ab91cb34d2831378d0fd1542ef5f22e43f895ae5caeb8f7d34d78c865571d19724c37b42fe3b64df3f4a1c2802db77163e0603bfe0b34780d7204daea47e9303ad576630807c8d", 0x5c}, {&(0x7f0000000640)="5115a978bd5dc725d8cecc0030206255814a56805b7b44da226e689b3aee40705d95f643478f2b176532986adb72ecd2436313fcf338f3e930136043a1c37ee6ff9ce7737626e58a453bf68370af09480f81586540092e6b6190e0fb530cae66dbeb1a2082516148c627c37de39e2b5b286a7a2ef64a06d7788d6db88d4669c2f6e44430312c70c1222ba93e2e17aacba3aef8543420464b65d3320efffd526084d5c1466916324423c923c61fee595f801b6fc89232c780fed11f", 0xbb}], 0x2, &(0x7f0000000e80)=[{0xf8, 0x1, 0x3, "13fba82ea7a9981e78f025e4192f77675f5abbe7adc1d841a0a561636403cde45c9d740457bc87e1e17720f0ec528be0a3d9adbb3d44477b05c4df3e430e9d5a16fcbd752fe3eb27a0aed4e394d60797b287b8a14b9f0672e3e7c7cb93d7c6f845ea09ee883fb08611cc691f4fd2f23913dcef1176e46c54937c33871a4b27bf6d5a4941014e68a46f4fea67bb5524b88c25760acddbcf52a405951e164faa501e11ff7c3e68aee8de99d6a334344bfd0c1f86019ba0f2f40f78f9611eba2f1fe4c060788d76b0cc1bc73e464eb85e5617bf2143f14ab356a94b8376cd7bdc8ae2ff9491"}, {0x1010, 0x103, 0xc5e7, "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"}, {0xc0, 0x1, 0x2, "ef931e43dfb41ceee64055a48b7edb4bf3c5e34bd6b160499edd5f8a007b16dd69fa828b0b4435e5c0fcc15745a0a581f6a83727fcdfc0ef0f9721b13ea1815e6c15cc46770a6cb420c7414df1ca3f4f4e86bb9547237142ff074f3416ac24a8bb00581754709e383d0682d5b72486e64e84d366b03a221b05c2d37ec8728f737729cc42e3ea87f31e4dca95cc61e46bd74cdd4bad529dbd3f3bf07dfe56acb20ff563e8db81ae036b243aca"}, {0x1010, 0x3a, 0x5, "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"}], 0x21d8}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003080)="1eb34a5c9d2bc57fb5bd39f7", 0xc}, {&(0x7f00000030c0)="f94119bd17b7a9cb6fd00500925fbdc5a51dbf38d02c1008a0a2af2f3c8296712055a328b4cbf1938da9b8f5328605f21ad0ad41827558bb4995481a4cb22a70f71b6873158eff00ae9fe34bcb3fe65d8ca66d07b5a4d1c5db12ba579f6087c5cbb72ef428e86b623e51a276dff69ba6d260dcbf63c9e61c7e696a771456d6209d21985ae9e136518e54e7e4ffe3ac54446dff1f0c1985e0c806523b508e1b3db71db40a2d8ce90ea98f5e9654990de11a7eeba47a9d4db21889f8d71d16734f079fd3ecc8ebad96817d4f8842a619c8f39ae5e91228877729145b9fa4be4895e164c00e20cf84c6616cef4e632911345b00a5b8d7", 0xf5}], 0x2}}, {{&(0x7f0000003200)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x4, 0x2}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003280)="755e3c3e2cb48651cbaddeb0ad466e42debc27c0dd9a9ff9dac2f5a5006c3e95899d490b1178b1f625bef4a44062553e3772c58d1fa19e382fcc9f2301bc05a2c3459c0328b1e52165499ae2bd0eaa63abaf7e702ba84a12baeb6759dd432416e5b7c87f62589dda8725b56c855a68b3aad7609d3ee32720", 0x78}, {&(0x7f0000003300)="b0dbdd04b2601e8d4ee436182e743673cff15c51ffc75ef2c7726c4ada2d69ebb47695707a7afac5f08ba3c0d0c5c06d628adec95027b3deaad0eabbc6a93e9c7af1b6c58995777988c117bf", 0x4c}, {&(0x7f0000003380)="d00492ee494096dec9a4aa00c7d031f68ee3a9d5ae3081f6faf5c7df0fb4d39e49bb50c4a70977cf4d79f1a5d23fe04ba1f3f2185f3173781849ca123905df12d25678a30c4e8a518e998ef63b79770193ec32237e094f50b8370670a33a2ed60e1c23a8325a95bb1ec6a9d6c57d3468cb13588abff369fcf27b4a5998c4d425c5e13dbed3bc4b8fb46d08284444df2befb8a2f5ded674b34f211f5be5cca92c0bbcfc05f7f00878457237578a24e07a40861ac6dcde0c6520f6e65830da4a920667184ff393b260cd2d31300257", 0xce}, {&(0x7f0000003480)="1a3df912f6d18d390482ca0cab62f234a3e36abe58e5dc3816920282b76b6c92cd3f494192374431471447fe129dc9dcbe134ba0a6c0e605ce70a617a2604f133e04b1fa62c577a6d0f6e65055ec6fadac97b4023b198f9f8a545e34a9c1b5b9c8a7f43e445729e7d671c8c3e8b3305240c6dfe14bde0af995985255df1ea7056c3b61b534d6027aa2f52d9bfac20ce3f7ac41434e8d15b2252655d3cc4b63310fc2db80b4bbbfb72e50adbac52387a58026b46f4401189f67c58649a1db2a33c4cf40", 0xc3}, {&(0x7f0000003580)="88cde1218f7a10f2bddb9cfe1038bc939c742dbbbf54bf8f9fd1", 0x1a}, {&(0x7f00000035c0)="9b818d528456ebe94dafe2d41f80e96f051450d2f24097849160a6eab607241ef1b6d84f64f5de175167a0afb48028e75cbda550fe65acccddc6", 0x3a}, {&(0x7f0000003600)="12e60781a310ae5b9b6f30dc0adc21d81827a8fdeb6997e26f2b3c682022e979b89b17fe00c54e34ea0488d48bd9d41e049a55b1c2c0b73e193c40c17dbed8232342072e7d35de802b2d14", 0x4b}], 0x7, &(0x7f0000003700)=[{0xd8, 0x110, 0xffff, "2d8f6c2650aa44f68c6976c25893baac57074faeefac985a85a14b12a0a624a2bcfecdf051ef8ccd5b71c544880b79043609a76a951f81d469e5f7830938a8d322ed9a10c47a989986e5e2bc19616979fe8b28b4ad80ac67db8fc19aa9215cd85c09f11285aa0dbf7c19870d4cd37a9d5ef983959ebcf4b55c95303cac192d2db0668217ade8770ba8636e11424d3c99304965856ccbf3c6f8db3c468dbc6d1d235b31939067567506bed170f4711ec0919986f2a2874818def78a1c562093f2f9"}, {0xa0, 0x117, 0x81, "8dc8c75b17b2b3285192078eabb161927b661a06e0e95d9cee5cfdac4b824ffabbc0e449ec2370f37b068e006013596ef5122db0cb9a65fcfc578ce8027cab297de900c0402c36030ebe9096332a5cc8260361c3fa689ec12db14a55e767c2b9709c0af311ea3c9efe8740cf968a54e4125fd839dfcb5c245ec67513ad3c216be0aa70970ba0cb630441"}], 0x178}}], 0x3, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_pgetevents(r5, 0x4, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], 0x0, 0x0) eventfd2(0x0, 0x80800) io_submit(r5, 0x0, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close(r0) memfd_create(&(0x7f0000000b80)='v\xa6\xf5hj6,rR\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8b\x8e\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadh\x8f\x0f\xff\x02n\x9d\x85\xea\x1ao}\x12\x99\xbc{\x9c\x82Sp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\x02\x00\x00\x00q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5\t\xaag\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xecA+r\xc8HZtU\x1e\xcf\x050\xb9\x1a0\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f\n\xe1\x93f\xfe-tnjr\x1e\x1en*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98\xf0\xb8}P\x15\xcc\x05\xfb\xc1\xc3\xb7g\xa7\x90\x17|*Y+\xd7\xe9\xafx\r\xa57\x85\xe4\xb0e\xe6Rj\x19\x10\xd47\x94\xa2X \xea\x04\xb0\xb1\xe4\xae\x82f\xad\x99\xf7\xf8df\xd4\xe9\x84\x84\xa8\xbd\xaea\xcb\xd4\xdco\x95f_!\xe9\xa7\xaen\xa6I\xf1\xa1Y\xc1\x8b\x1b\xa1\x8aH&\x15\xb7\xf0\x83\x9dz}\x8a\x975P|\xb9\xe0|\xb1\xe7\x88\x7f\x00\xea0X:\xd3\x9f\x1c\xcbl\x87T)\xa2w\x81\x12\xd3\xcf\x13\xf9d\xb0E\x19\x1e\x836\xa2\x87\xbd\xfd\x14\xff\x92\xb4,S\xdbx\xaeZ\xc6\x93\xfff\x88\xa2\x06rdq=\"\xee2\xa11\\X\x0fY\xf0\xfahr\x9d@\xd3o\xf9\x87wL\xf9\xdaq1\r\xba-\xe5\xe4\xa4\xef\xf3\x05\xcd\xe5\x89%', 0x0) 1.810125345s ago: executing program 0 (id=1910): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0x3, 0x4000000, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.727752963s ago: executing program 0 (id=1911): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (fail_nth: 1) 1.676227897s ago: executing program 2 (id=1912): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000010300000000f7c30000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 1.672624513s ago: executing program 4 (id=1913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'tunl0\x00', 0x7101}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0xffe0}, {0x0, 0xfff2}}}, 0x24}}, 0x40000d0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'pimreg\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'batadv_slave_0\x00', 0x300}) 1.367072173s ago: executing program 0 (id=1914): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0x3, 0x4000000, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (fail_nth: 2) 1.128960752s ago: executing program 2 (id=1915): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) ppoll(&(0x7f0000002280)=[{r0, 0x800}], 0x1, 0x0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)={0x0, 0xa, 0x6, "66747a6dfb12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) (async) mq_timedreceive(r0, &(0x7f00000022c0)=""/4092, 0xffc, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x2000, 0x1, 0x2, 0x1, 0x1}, 0x10) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) (async) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000140)) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x1}]}]}, 0x28}], 0x1}, 0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000000)=0x8, 0x4) 1.009138097s ago: executing program 0 (id=1916): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0x3, 0x4000000, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 978.382869ms ago: executing program 3 (id=1917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa50085ffffff0007010000f8ffffffb7020000ffffff1fb703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xffb, &(0x7f0000001600)=""/4091, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) 890.801993ms ago: executing program 0 (id=1918): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r1 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = memfd_create(0x0, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'team0\x00', 0x4}) ftruncate(r2, 0x1000006) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) 835.72675ms ago: executing program 3 (id=1919): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, 0x0, 0x4000850) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0x0, 0x400, 0x1, 0x2, 0x1, 0x1}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3, 0x2, 0x0, 0x0, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000040)=0xff56) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x16) setitimer(0x2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x1e0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x82a9}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff73}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7510}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4}, 0x4) 725.08032ms ago: executing program 4 (id=1920): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x5, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x68, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x1, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0xffffffff, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x2, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x6, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x3ff, 0x4, 0x70a, 0x7fffffff}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0x1, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0x8, 0x62182213, 0x8, 0x8000, 0x8f4c}, {0x36b, 0xb6, 0x0, 0x5f60be42, 0x8, 0x7}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x3, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0x3, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x200, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x4, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x7, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0xffffffff}, {0x8, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x4, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x0, 0x3, 0x8000, 0x3fd}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0xb, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0x5}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0xebbc}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x1006, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x4, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x2}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe88000000000000000000000000000100000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000010000000000000000080000000000000000000000000000000000000000000000000000001d000000000000007f00000000000000990c0000000000000000000000000000dd02000000000000000000ff80000000010100020000000084010500ac141439000000000000000000000000000004d32b00000000000000ac14140c00"/165], 0x23c}}, 0x40044) 656.062887ms ago: executing program 0 (id=1921): sched_setaffinity(0x0, 0x7, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x8363651a8c0f8bc3) socket(0x2, 0x4, 0x3d5d) (async, rerun: 64) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000600)="261c650907466d64355c999fb60315680000000100000000edebbadb66f5cd072411805bfd8a83b7b24ee59561b1b922cbc32eff7021bbdfe246b47aec70a7f9171ef038bcfe36cc54a4acc9fc2cc5dee644ecf3b53a260efb181acf65ad285183497ab11313e373939f7aa76586ef2c3a2eba8b2f7d48722fbf9491d64ae37cfc5765b1d01ec5296171b110bb44a9b2b6d66f3187061b6da8c6391e4d7048444ab57d41fff90b67ed5f776b15f9648d59aaa1eb094a2f771777fc32388f24ca2eb127b2add51ba90602c6894433e90d4a3435c3efdfbcb0200fcab16cb901931634a27cccd4a6b656f92c709d48c34f00f100") (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x7, 0x2, 0x15}, @fda={0x66646185, 0x4, 0x2, 0x10}, @fda={0x66646185, 0xc, 0x1, 0x3c}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x10000000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103"], 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) r5 = fsopen(&(0x7f00000002c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x39, 0x0, &(0x7f0000000100)=[@dead_binder_done], 0x0, 0x0, 0x0}) (async) r6 = socket$inet6(0xa, 0x2, 0x0) shutdown(r6, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) unshare(0x62020400) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0x5, &(0x7f0000000240)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x2, 0x20006b}, 0x3c) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) 483.844511ms ago: executing program 4 (id=1922): fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) (async, rerun: 32) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) (async, rerun: 32) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2c, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) tkill(r0, 0x22) 260.2284ms ago: executing program 3 (id=1923): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) (async) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x2, 0x0) (async) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x934, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) r3 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x10, 0x34, "", [{{0x9, 0x4, 0x0, 0xcf, 0x1, 0x7, 0x1, 0x2, 0x24, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x37, 0x5, 0x12}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x10, 0x1}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6, 0x5, 0x1, 0xff, 0x7}, 0x79, &(0x7f0000000140)={0x5, 0xf, 0x79, 0x3, [@generic={0x5f, 0x10, 0xb, "8e85a0f3f603e8ca4432cff914748ee989c1fa4e226656b7395f65b5f5a72eccb6602da222d3b29da547e7cbee8e8b02f3344a8e4d97e64626fe2e0e2ea103d2f88a7e8f248eddb8802a2e1dbf3860ce9643ca1545c9e3d69c725159"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x10, 0xa, 0xfffa, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xbe, 0x5, 0x4}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x421}}, {0xed, &(0x7f0000000240)=@string={0xed, 0x3, "60cfed2850ebdd6eab82c99280a4c356aad9bcde31810f7661c3db0d6c83f92100407f0dbbd897f2f211ac678db314cbd9e2427c19d0a446faa7c37bfb0423895ef33b1a7e8df99b7354af97844828cf576c85d379d85e6954a86602bce7555ade3e94395b1ffccb6df00e6d3969de4dd2061231a93729cddaf9c203de9085a54f569d507d45b790e7e7d7ae99da84710fa74a5d6aac8e6e54c1c2d1aae617a2b75193b4e33d0fc49374d44d79db4ee751b0fce88bc8bb6da9404c91fa7ac634f26b84fbb39182c63f067a2c4d681f98321560ea523329c588bee8f523622e795996227db1888fcaebb0c8"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf4ff}}]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0xffffffffffffff12, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000001800018014006d3000000000020005001c0002000000080011000900000006e44169a3f84e7f807e2ae9189aaef97e08a6e3df4f88fc90bfa796b58c0bacea09d6e6e25982d924b86d58121744d9977a0bf4307a07e3d7a0917ed922480b70aa0cb86a926e5b34ee95c4c1fe74acf0cf770e527bd7f4b7d3b17c74611b583a17ff45bad66badfe721393e284c6f93e76b5c56f4aa583eb7e6181380edca64709da46bdce0d0ca5f7ca5fa78494395f7ad217f34303de6e914e43478381bd62e924f1dbdcaee560f8214a2fd2dd1a3a9be1713c7bb54f5f28cdc01b9751a43cae62e34215b04bff4a4398684f42de18f953873400"], 0x3c}}, 0x4000000) (async) r6 = semget$private(0x0, 0x20000000102, 0x0) semop(r6, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0xe65b, 0x1000}], 0x2) (async) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_pid(r9, &(0x7f0000000000), 0xfdef) (async) recvmsg$unix(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r10, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x334e8b, 0x100000000000000}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r12, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffffd, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r12, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) (async) syz_usb_control_io$printer(r3, &(0x7f0000000540)={0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f0000000840)={0x34, &(0x7f0000000c80)=ANY=[@ANYBLOB="2018eb00000027d168bbd96a12cd7ca3ad82397a50c4b7cc179727342703d726470c8e4110f41ace883fd7e5b08ce8a0b9fa92736a60f8a93a7795993072f59b9174e452edb1f1b14b752fa1c57768d1568fbf4f0d1d2f4fcb455526645aff1349e36ae25c931e090816a027527ff77373a8aa5b202bbb01d3c2ceb4683e81cbca41094bac7c9cc9f11baee58829920a0f4fdd2abada8c5af9a2c1ce573c9dee9a1fae9369e8fb5ddd9aff24d92e95991386b3d79e4164e8d76592f0cb008734466e95bf65393ee49bec72210c19c6b94249bf84e24ed4dfb69c927379f22202b4699ba6efc9745bf1938ca7fce4bc90a07236c071a9b3361d5a2e5ff7a8e20cdce49f38da5646ab4482eca117548bd56d12fae8708b9cf90b71020cf08a08584d73a0dea0f8696a6c2306fc489f3af12dd5719426f2e7a5199a3939842afac19cb64e5f36db639e31a55a7fc8e4aafadeeedfc837a17d3275fc375712424f37612c60aff21c6b272188abee563da8dbcc2cd282c775bc27908eaed77842bde8f27469077ec2748938afbf49dd637ecbfc043775dce94e2b5df988a007c0b29cc86525c57640bea381cf27f0a1fdbf45fdc8bf037008a4ad09cf26f58898c24cfe26ce557eb0c354238bd5fa7dd780bb539590da"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000700)={0x20, 0x0, 0x9a, {0x98, "5678af5bed8f12d5d1becf96d333708bed86f6160fe5d56b423f4a7aba17da0e5a10a7ce11868977fdaec9ec78978c09841b53d484c96848648dbf366188d12c81b6001dabac8aa4b43dca8c9cf7f04e23f7ab91f32b1effb395c8d3dad8532489b984d8cc0524732e74cf7ffb7d7dc5d17334cd0d5c24801e2fe945ddf32922107597027070b1e9dc0cca8642d0319b012ae0a183fd307f"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x6}}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r4, {0x7a}}, './file0\x00'}) 254.666913ms ago: executing program 4 (id=1924): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (fail_nth: 2) 0s ago: executing program 4 (id=1925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000400000000f7c30000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) kernel console output (not intermixed with test programs): device number 111 using dummy_hcd [ 493.878075][ T5709] usb 2-1: device descriptor read/8, error -71 [ 494.116902][ T5709] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 494.137497][ T5709] usb 2-1: device descriptor read/8, error -71 [ 494.234721][T11935] netlink: 'syz.3.1588': attribute type 2 has an invalid length. [ 494.243174][T11936] loop5: detected capacity change from 0 to 7 [ 494.248245][ T5709] usb usb2-port1: unable to enumerate USB device [ 494.261012][T11936] Dev loop5: unable to read RDB block 7 [ 494.261214][T11936] loop5: unable to read partition table [ 494.264820][T11936] loop5: partition table beyond EOD, truncated [ 494.265166][T11936] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 494.331381][T11935] netlink: 11148 bytes leftover after parsing attributes in process `syz.3.1588'. [ 494.455439][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1590'. [ 494.479762][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 494.485988][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 494.714893][T11948] lo: Caught tx_queue_len zero misconfig [ 494.721216][T11948] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 494.969916][T11960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 495.016929][T11960] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 495.439387][T11974] sctp: [Deprecated]: syz.3.1598 (pid 11974) Use of int in max_burst socket option. [ 495.439387][T11974] Use struct sctp_assoc_value instead [ 495.506710][ T8439] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 495.636668][ T8439] usb 5-1: device descriptor read/64, error -71 [ 495.675278][T11981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.684486][T11981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.821446][T11988] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1603'. [ 495.888024][ T8439] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 496.036782][ T8439] usb 5-1: device descriptor read/64, error -71 [ 496.068772][ T8444] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 496.139725][ T359] net_ratelimit: 24 callbacks suppressed [ 496.139782][ T359] bond1: (slave bridge1): failed to get link speed/duplex [ 496.157093][ T8439] usb usb5-port1: attempt power cycle [ 496.246779][ T359] bond1: (slave bridge1): failed to get link speed/duplex [ 496.250877][ T8444] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.260167][ T8444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.260295][ T8444] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 496.274248][ T8444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.274281][ T8444] usb 2-1: Product: syz [ 496.274325][ T8444] usb 2-1: Manufacturer: syz [ 496.274393][ T8444] usb 2-1: SerialNumber: syz [ 496.414726][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 496.417800][ T359] bond1: (slave bridge1): failed to get link speed/duplex [ 496.429008][ T31] audit: type=1326 audit(1788663805.326:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.3.1606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb824d9e159 code=0x7ffc0000 [ 496.449558][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.452039][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.461106][ T31] audit: type=1326 audit(1788663805.326:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.3.1606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb824d9e159 code=0x7ffc0000 [ 496.461309][ T31] audit: type=1326 audit(1788663805.346:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.3.1606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb824d9e159 code=0x7ffc0000 [ 496.461486][ T31] audit: type=1326 audit(1788663805.346:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.3.1606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb824d9e159 code=0x7ffc0000 [ 496.461656][ T31] audit: type=1326 audit(1788663805.346:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.3.1606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb824d5e98e code=0x7ffc0000 [ 496.461833][ T31] audit: type=1326 audit(1788663805.346:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.3.1606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb824d9ddeb code=0x7ffc0000 [ 496.462002][ T31] audit: type=1326 audit(1788663805.346:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.3.1606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb824d9ddeb code=0x7ffc0000 [ 496.462168][ T31] audit: type=1326 audit(1788663805.346:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.3.1606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb824d9e159 code=0x7ffc0000 [ 496.462337][ T31] audit: type=1326 audit(1788663805.346:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.3.1606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb824d9e159 code=0x7ffc0000 [ 496.474310][ T31] audit: type=1326 audit(1788663805.366:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.3.1606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb824d9e159 code=0x7ffc0000 [ 496.531493][T11996] fuse: Unknown parameter 'ñ®'Š)ƒV' [ 496.538884][ T8439] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 496.540271][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 496.569102][ T8439] usb 5-1: device descriptor read/8, error -71 [ 496.657724][ T359] bond1: (slave bridge1): failed to get link speed/duplex [ 496.744653][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.752962][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.769995][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 496.792249][ T8444] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 496.808220][ T8444] usb 2-1: USB disconnect, device number 113 [ 496.847302][ T8439] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 496.869293][ T8439] usb 5-1: device descriptor read/8, error -71 [ 496.880292][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 496.924540][T11998] netlink: 'syz.2.1607': attribute type 1 has an invalid length. [ 496.976966][ T8439] usb usb5-port1: unable to enumerate USB device [ 496.988799][ T203] bond1: (slave bridge1): failed to get link speed/duplex [ 497.097989][T12003] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1608'. [ 497.110716][T12000] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1608'. [ 497.127218][ T8911] bond1: (slave bridge1): failed to get link speed/duplex [ 497.238150][ T8911] bond1: (slave bridge1): failed to get link speed/duplex [ 497.297325][ T8444] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 497.446668][ T8443] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 497.466650][ T8444] usb 2-1: Using ep0 maxpacket: 8 [ 497.472324][ T8444] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 497.483505][ T8444] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 497.483557][ T8444] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 497.483667][ T8444] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.483739][ T8444] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.483831][ T8444] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 497.483897][ T8444] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.483971][ T8444] usb 2-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.484099][ T8444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.593892][T12008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.608964][ T8443] usb 3-1: Using ep0 maxpacket: 8 [ 497.616992][ T8443] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 497.622326][ T8443] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.628893][T12008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.648810][ T8443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.648864][ T8443] usb 3-1: Product: syz [ 497.651811][ T8443] usb 3-1: Manufacturer: syz [ 497.651927][ T8443] usb 3-1: SerialNumber: syz [ 497.673682][T12008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.682104][T12008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.850640][ T8444] usb 2-1: usb_control_msg returned -71 [ 497.850739][ T8444] usbtmc 2-1:16.0: can't read capabilities [ 497.882417][ T8444] usb 2-1: USB disconnect, device number 114 [ 498.039389][ T8443] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 498.039443][ T8443] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 498.047546][ T8443] usb 3-1: 1:1: cannot set freq 137 to ep 0x1 [ 498.049190][ T8443] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 498.119575][ T8443] usb 3-1: USB disconnect, device number 125 [ 498.181431][T10293] udevd[10293]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.272090][T12014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.284233][T12014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.456664][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'. [ 498.598649][T12023] loop5: detected capacity change from 0 to 7 [ 498.605345][T12023] Dev loop5: unable to read RDB block 7 [ 498.605391][T12023] loop5: unable to read partition table [ 498.605589][T12023] loop5: partition table beyond EOD, truncated [ 498.605607][T12023] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 498.726722][ T8444] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 498.886659][ T8444] usb 5-1: Using ep0 maxpacket: 8 [ 498.892490][ T8444] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 498.903777][ T8444] usb 5-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 498.913114][ T8444] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 498.925019][ T8444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.938785][ T8444] usb 5-1: config 0 descriptor?? [ 498.986727][ T8443] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 499.016862][ T8439] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 499.146890][ T8443] usb 2-1: Using ep0 maxpacket: 8 [ 499.155609][ T8443] usb 2-1: unable to get BOS descriptor or descriptor too short [ 499.163982][ T8443] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=38.c2 [ 499.183266][ T8439] usb 3-1: unable to get BOS descriptor or descriptor too short [ 499.192266][ T8439] usb 3-1: not running at top speed; connect to a high speed hub [ 499.200348][ T8439] usb 3-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 499.210285][ T8443] usb 2-1: config 28 has an invalid interface number: 157 but max is 0 [ 499.210346][ T8443] usb 2-1: config 28 has no interface number 0 [ 499.210393][ T8443] usb 2-1: config 28 interface 157 has no altsetting 0 [ 499.234663][ T8459] usb 5-1: USB disconnect, device number 113 [ 499.244015][ T8439] usb 3-1: config 12 has an invalid interface number: 126 but max is 0 [ 499.244062][ T8439] usb 3-1: config 12 has no interface number 0 [ 499.244156][ T8439] usb 3-1: config 12 interface 126 has no altsetting 0 [ 499.271715][ T8443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.271763][ T8443] usb 2-1: Product: syz [ 499.271802][ T8443] usb 2-1: Manufacturer: syz [ 499.271831][ T8443] usb 2-1: SerialNumber: syz [ 499.296266][ T8439] usb 3-1: string descriptor 0 read error: -22 [ 499.302773][ T8439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.411121][T12037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.415763][T12037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.432767][T12037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.440498][T12037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.556862][ T8439] dvb-usb: found a 'PCTV 2002e' in cold state, will try to load a firmware [ 499.649528][T12037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.664391][T12037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.679550][ T8439] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 499.688268][ T8439] dib0700: firmware download failed at 7 with -22 [ 500.017236][ T8443] usb 2-1: USB disconnect, device number 115 [ 500.404186][T12050] netlink: 'syz.3.1624': attribute type 2 has an invalid length. [ 500.726142][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.730238][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.875315][T12061] loop5: detected capacity change from 0 to 7 [ 500.884119][T12061] Dev loop5: unable to read RDB block 7 [ 500.884193][T12061] loop5: unable to read partition table [ 500.884736][T12061] loop5: partition table beyond EOD, truncated [ 500.884790][T12061] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.093947][T12063] xt_MASQUERADE: bad rangesize 177 [ 501.206713][ T359] net_ratelimit: 33 callbacks suppressed [ 501.206775][ T359] bond1: (slave bridge1): failed to get link speed/duplex [ 501.316783][ T8911] bond1: (slave bridge1): failed to get link speed/duplex [ 501.426723][ T359] bond1: (slave bridge1): failed to get link speed/duplex [ 501.537004][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 501.546679][ T5709] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 501.667709][ T8911] bond1: (slave bridge1): failed to get link speed/duplex [ 501.697753][ T5709] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 501.700144][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.700237][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 501.704500][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 501.704573][ T5709] usb 5-1: Product: syz [ 501.704616][ T5709] usb 5-1: Manufacturer: syz [ 501.734413][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.734482][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.805948][ T5709] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 501.832897][T12084] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 501.969628][ T10] usb 3-1: USB disconnect, device number 126 [ 501.976689][T11123] bond1: (slave bridge1): failed to get link speed/duplex [ 502.055332][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.067866][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.086766][T11123] bond1: (slave bridge1): failed to get link speed/duplex [ 502.175238][T12088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.187047][T12088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.255830][ T5709] mos7840 5-1:1.0: probe with driver mos7840 failed with error -71 [ 502.264141][T11123] bond1: (slave bridge1): failed to get link speed/duplex [ 502.289991][ T5709] usb 5-1: USB disconnect, device number 114 [ 502.377215][ T359] bond1: (slave bridge1): failed to get link speed/duplex [ 502.446748][ T8443] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 502.491890][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 502.596731][ T8443] usb 3-1: device descriptor read/64, error -71 [ 502.647001][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 502.649635][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.658567][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.658654][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58716, setting to 1024 [ 502.658770][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 502.658843][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 502.664567][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.664643][ T10] usb 2-1: Product: syz [ 502.664687][ T10] usb 2-1: Manufacturer: syz [ 502.664796][ T10] usb 2-1: SerialNumber: syz [ 502.674616][T12095] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 502.846837][ T8443] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 502.952636][ T10] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 502.952726][ T10] cdc_ncm 2-1:1.0: bind() failure [ 502.971934][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 502.972011][ T10] cdc_ncm 2-1:1.1: bind() failure [ 503.006987][ T8443] usb 3-1: device descriptor read/64, error -71 [ 503.019243][ T10] usb 2-1: USB disconnect, device number 116 [ 503.117249][ T8443] usb usb3-port1: attempt power cycle [ 503.181659][T12097] loop5: detected capacity change from 0 to 7 [ 503.183843][T12097] Dev loop5: unable to read RDB block 7 [ 503.183958][T12097] loop5: unable to read partition table [ 503.184518][T12097] loop5: partition table beyond EOD, truncated [ 503.184570][T12097] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 503.478769][ T8443] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 503.513638][ T8443] usb 3-1: device descriptor read/8, error -71 [ 503.758365][ T8443] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 503.778959][ T8443] usb 3-1: device descriptor read/8, error -71 [ 503.859698][T12108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.887175][ T8443] usb usb3-port1: unable to enumerate USB device [ 503.941968][T12108] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 504.296668][ T8443] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 504.461870][ T8443] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 504.477818][ T8443] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.477866][ T8443] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 504.535318][ T8443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.535379][ T8443] usb 2-1: Product: syz [ 504.535413][ T8443] usb 2-1: Manufacturer: syz [ 504.535434][ T8443] usb 2-1: SerialNumber: syz [ 504.567645][ T10] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 504.761883][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 504.770313][ T10] usb 5-1: config 0 has an invalid interface number: 199 but max is 0 [ 504.770389][ T10] usb 5-1: config 0 has no interface number 0 [ 504.770509][ T10] usb 5-1: too many endpoints for config 0 interface 199 altsetting 193: 58, using maximum allowed: 30 [ 504.770609][ T10] usb 5-1: config 0 interface 199 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 504.770685][ T10] usb 5-1: config 0 interface 199 has no altsetting 0 [ 504.770766][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.789901][ T10] usb 5-1: config 0 descriptor?? [ 504.841193][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1644'. [ 505.024155][ T10] usb 5-1: string descriptor 0 read error: -32 [ 505.030511][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 505.297109][ T8443] usb 2-1: USB disconnect, device number 117 [ 505.679133][ T8459] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 505.826820][ T8459] usb 3-1: Using ep0 maxpacket: 32 [ 505.830100][ T8459] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 505.839587][ T8459] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.861703][ T8459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.861784][ T8459] usb 3-1: Product: syz [ 505.861837][ T8459] usb 3-1: Manufacturer: syz [ 505.861976][ T8459] usb 3-1: SerialNumber: syz [ 505.884519][ T8459] usb 3-1: config 0 descriptor?? [ 507.260276][ T10] usb 5-1: USB disconnect, device number 115 [ 509.475184][ T8443] usb 3-1: USB disconnect, device number 5 [ 509.491636][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1657'. [ 509.504121][T12170] bridge: RTM_NEWNEIGH with invalid ether address [ 509.527322][ T91] net_ratelimit: 26 callbacks suppressed [ 509.527388][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 509.642240][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 509.768391][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 509.877595][T12192] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 509.890735][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 509.978984][ T8459] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 509.997907][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 510.108721][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 510.117300][ T8459] usb 2-1: device descriptor read/64, error -71 [ 510.217162][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 510.326726][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 510.356782][ T8459] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 510.438012][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 510.496741][ T8459] usb 2-1: device descriptor read/64, error -71 [ 510.546759][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 510.618525][ T8459] usb usb2-port1: attempt power cycle [ 510.978123][ T8459] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 510.998697][ T8459] usb 2-1: device descriptor read/8, error -71 [ 511.145608][ T31] kauditd_printk_skb: 109 callbacks suppressed [ 511.145662][ T31] audit: type=1800 audit(1788663820.056:4733): pid=12214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1671" name="memory.events" dev="tmpfs" ino=1797 res=0 errno=0 [ 511.187241][ T31] audit: type=1804 audit(1788663820.096:4734): pid=12214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1671" name="/newroot/338/memory.events" dev="tmpfs" ino=1797 res=1 errno=0 [ 511.236734][ T8459] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 511.258196][ T8459] usb 2-1: device descriptor read/8, error -71 [ 511.371886][ T8459] usb usb2-port1: unable to enumerate USB device [ 512.053771][T12236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 512.111888][T12236] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 512.617515][T12251] netlink: 'syz.3.1678': attribute type 13 has an invalid length. [ 513.409485][T12258] futex_wake_op: syz.2.1679 tries to shift op by -1; fix this program [ 513.947800][ T8443] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 514.138939][ T8443] usb 2-1: Using ep0 maxpacket: 32 [ 514.149062][ T8443] usb 2-1: unable to get BOS descriptor or descriptor too short [ 514.156957][ T8443] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 514.175251][ T8443] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.190821][ T8443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.190871][ T8443] usb 2-1: Product: syz [ 514.190907][ T8443] usb 2-1: Manufacturer: syz [ 514.190928][ T8443] usb 2-1: SerialNumber: syz [ 514.461360][ T8443] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 514.489682][ T8443] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 514.577989][ T8912] net_ratelimit: 32 callbacks suppressed [ 514.578041][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 514.686957][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 514.714466][ T8443] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 514.732393][ T8443] usb 2-1: USB disconnect, device number 122 [ 514.797198][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 514.838223][T10291] udevd[10291]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.701237][T12291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.874651][T12291] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 515.894097][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 515.996713][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 516.510907][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 516.617264][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 516.728257][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 516.856743][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 516.859995][T12297] input: syz0 as /devices/virtual/input/input42 [ 516.967679][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 518.005899][T12320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.021449][T12320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.249877][T12327] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 518.258284][ T8444] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 518.268740][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 518.416810][ T8444] usb 2-1: Using ep0 maxpacket: 16 [ 518.426011][ T8444] usb 2-1: unable to get BOS descriptor or descriptor too short [ 518.426150][ T8444] usb 2-1: New USB device found, idVendor=0df6, idProduct=003c, bcdDevice=35.64 [ 518.444668][ T8444] usb 2-1: config 12 has no interfaces? [ 518.462479][ T8444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.462515][ T8444] usb 2-1: Product: syz [ 518.462529][ T8444] usb 2-1: Manufacturer: syz [ 518.462543][ T8444] usb 2-1: SerialNumber: syz [ 518.716996][ T8444] usb 2-1: USB disconnect, device number 123 [ 519.636920][ T91] net_ratelimit: 23 callbacks suppressed [ 519.636961][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 519.748621][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 519.871722][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 519.986732][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 520.107867][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 520.216874][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 520.327338][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 520.438064][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 520.527153][ T8444] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 520.558265][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 520.666823][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 520.697800][ T8444] usb 3-1: Using ep0 maxpacket: 16 [ 520.703681][ T8444] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 520.715787][ T8444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.715843][ T8444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.715898][ T8444] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 520.715951][ T8444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.744971][T12351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.751594][T12351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.782109][ T8444] usb 3-1: config 0 descriptor?? [ 520.804630][T12351] fuse: Unknown parameter 'fî' [ 520.857458][ T8459] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 521.009932][ T8459] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 521.014128][ T8459] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 521.014211][ T8459] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 521.042361][ T8459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.042426][ T8459] usb 2-1: Product: syz [ 521.042463][ T8459] usb 2-1: Manufacturer: syz [ 521.042484][ T8459] usb 2-1: SerialNumber: syz [ 521.072284][ T8459] usb 2-1: config 0 descriptor?? [ 521.093417][ T8459] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 521.164343][T12347] loop8: detected capacity change from 0 to 16384 [ 521.471561][T12352] loop8: detected capacity change from 16384 to 16383 [ 521.881344][T12338] syz.4.1703 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 522.056453][ T8444] usbhid 3-1:0.0: can't add hid device: -71 [ 522.056676][ T8444] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 522.073441][ T8444] usb 3-1: USB disconnect, device number 6 [ 522.557861][ T8459] gspca_sunplus: reg_r err -71 [ 522.558044][ T8459] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 522.581206][T12348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.598738][ T8459] usb 2-1: USB disconnect, device number 124 [ 523.267225][ T8444] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 523.429983][ T8444] usb 3-1: unable to get BOS descriptor or descriptor too short [ 523.442155][ T8444] usb 3-1: not running at top speed; connect to a high speed hub [ 523.451277][ T8444] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 523.495771][ T8444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.504186][ T8444] usb 3-1: Product: syz [ 523.508967][ T8444] usb 3-1: Manufacturer: syz [ 523.513713][ T8444] usb 3-1: SerialNumber: syz [ 523.744357][T12370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.764576][T12370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.789445][ T8444] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 523.877904][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 523.963372][ T8444] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 524.011022][ T8444] usb 3-1: USB disconnect, device number 7 [ 524.027627][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 524.037713][ T10] usb 2-1: config index 0 descriptor too short (expected 69, got 51) [ 524.037792][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 524.037839][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 25466, setting to 1024 [ 524.057631][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.057660][ T10] usb 2-1: Product: syz [ 524.057678][ T10] usb 2-1: Manufacturer: syz [ 524.057694][ T10] usb 2-1: SerialNumber: syz [ 524.133955][T10740] udevd[10740]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.157898][ T10] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 524.528806][T12337] syz.4.1703 (12337) used greatest stack depth: 17920 bytes left [ 524.588326][T12390] bridge0: port 3(vlan2) entered blocking state [ 524.590922][T12390] bridge0: port 3(vlan2) entered disabled state [ 524.604095][T12390] vlan2: entered allmulticast mode [ 524.604147][T12390] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 524.624027][T12390] vlan2: entered promiscuous mode [ 524.629285][T12390] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 524.658073][ T12] net_ratelimit: 21 callbacks suppressed [ 524.658137][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 524.732605][ T10] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 524.767164][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 524.884909][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 524.987156][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 525.026238][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 525.096679][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 525.109349][ T10] usb 2-1: USB disconnect, device number 125 [ 525.151064][T12398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 525.207512][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 525.257028][T10740] udevd[10740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.300643][T12398] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 525.330957][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 525.376720][ T8439] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 525.437732][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 525.506970][ T8439] usb 3-1: device descriptor read/64, error -71 [ 525.546799][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 525.659443][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 525.746870][ T8439] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 525.876666][ T8439] usb 3-1: device descriptor read/64, error -71 [ 525.999999][ T8439] usb usb3-port1: attempt power cycle [ 526.356735][ T8439] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 526.390252][ T8439] usb 3-1: device descriptor read/8, error -71 [ 526.646853][ T8439] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 526.667337][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 526.683257][ T8439] usb 3-1: device descriptor read/8, error -71 [ 526.787211][ T8439] usb usb3-port1: unable to enumerate USB device [ 526.818197][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 526.832576][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 526.832651][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 526.833895][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 526.833937][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 526.833967][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 526.833996][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 526.834100][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 526.834165][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 526.834270][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 526.876702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 526.933965][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.934031][ T10] usb 2-1: Product: syz [ 526.934070][ T10] usb 2-1: Manufacturer: syz [ 526.934126][ T10] usb 2-1: SerialNumber: syz [ 526.966012][ T10] usb 2-1: config 0 descriptor?? [ 526.972150][T12421] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 526.991132][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.378288][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 527.550618][T10293] udevd[10293]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.591187][ T10] usb 2-1: USB disconnect, device number 126 [ 528.375168][T12429] batadv_slave_1: entered promiscuous mode [ 528.398862][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 528.509672][T12437] hub 8-0:1.0: USB hub found [ 528.593057][T12437] hub 8-0:1.0: 1 port detected [ 528.651149][T12445] xt_CONNSECMARK: invalid mode: 254 [ 528.896912][ T8439] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 529.057751][ T8439] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 529.068640][ T8439] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.095241][ T8439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 529.095291][ T8439] usb 3-1: Product: syz [ 529.095331][ T8439] usb 3-1: Manufacturer: syz [ 529.095353][ T8439] usb 3-1: SerialNumber: syz [ 529.355439][ T8439] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 529.678943][ T8912] net_ratelimit: 33 callbacks suppressed [ 529.679013][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 529.740013][T12427] batadv_slave_1: left promiscuous mode [ 529.746656][ T8439] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 529.796696][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 529.906890][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 529.917766][ T8439] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 529.928660][ T8439] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.941495][ T8439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.276703][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 530.401585][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 530.506758][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 530.532718][ T8439] wacom 0003:056A:033B.0016: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 530.552106][ T8439] wacom 0003:056A:033B.0016: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 530.570230][ T8439] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0016/input/input43 [ 530.616745][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 530.823406][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 530.942842][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 530.987242][ T8457] usb 2-1: USB disconnect, device number 127 [ 531.066721][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 531.183241][T12466] fido_id[12466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 532.066455][ T8457] usb 3-1: USB disconnect, device number 12 [ 532.099729][ T8457] usblp0: removed [ 532.137849][ T8444] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 532.263488][T12483] loop5: detected capacity change from 0 to 7 [ 532.274446][T12483] Dev loop5: unable to read RDB block 7 [ 532.274540][T12483] loop5: unable to read partition table [ 532.275141][T12483] loop5: partition table beyond EOD, truncated [ 532.275195][T12483] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 532.304646][ T8444] usb 2-1: unable to get BOS descriptor or descriptor too short [ 532.304718][ T8444] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 532.323415][ T8444] usb 2-1: config 74 has an invalid interface number: 142 but max is 2 [ 532.323471][ T8444] usb 2-1: config 74 has an invalid interface number: 72 but max is 2 [ 532.323516][ T8444] usb 2-1: config 74 has an invalid interface number: 97 but max is 2 [ 532.323544][ T8444] usb 2-1: config 74 has no interface number 0 [ 532.323567][ T8444] usb 2-1: config 74 has no interface number 1 [ 532.323590][ T8444] usb 2-1: config 74 has no interface number 2 [ 532.323659][ T8444] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 532.323694][ T8444] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 532.323728][ T8444] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 532.323759][ T8444] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 532.323804][ T8444] usb 2-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 532.323849][ T8444] usb 2-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 532.323879][ T8444] usb 2-1: config 74 interface 142 has no altsetting 0 [ 532.323904][ T8444] usb 2-1: config 74 interface 72 has no altsetting 0 [ 532.323928][ T8444] usb 2-1: config 74 interface 97 has no altsetting 0 [ 532.472677][ T8444] usb 2-1: string descriptor 0 read error: -22 [ 532.472828][ T8444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.498320][T12479] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 532.498962][T12479] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 532.515011][ T8444] mct_u232 2-1:74.142: MCT U232 converter detected [ 532.516430][ T8444] mct_u232 ttyUSB0: expected endpoint missing [ 532.534447][ T8444] mct_u232 2-1:74.72: MCT U232 converter detected [ 532.550318][ T8444] mct_u232 ttyUSB1: expected endpoint missing [ 532.562611][ T8444] mct_u232 2-1:74.97: MCT U232 converter detected [ 532.585754][ T8444] mct_u232 ttyUSB2: expected endpoint missing [ 532.724913][ T8444] usb 2-1: USB disconnect, device number 2 [ 532.739355][ T8444] mct_u232 2-1:74.142: device disconnected [ 532.757914][ T8444] mct_u232 2-1:74.72: device disconnected [ 532.773691][ T8444] mct_u232 2-1:74.97: device disconnected [ 532.788278][T12237] syz.4.1675 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 532.788350][T12237] CPU: 0 UID: 0 PID: 12237 Comm: syz.4.1675 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.788381][T12237] Tainted: [L]=SOFTLOCKUP [ 532.788411][T12237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.788460][T12237] Call Trace: [ 532.788490][T12237] [ 532.788527][T12237] dump_stack_lvl+0xe8/0x150 [ 532.788650][T12237] dump_header+0xd3/0x4b0 [ 532.788732][T12237] oom_kill_process+0x3ab/0x9e0 [ 532.788816][T12237] out_of_memory+0x1064/0x1480 [ 532.788880][T12237] ? try_charge_memcg+0xc32/0x15e0 [ 532.788980][T12237] ? __pfx_out_of_memory+0x10/0x10 [ 532.789042][T12237] ? do_raw_spin_unlock+0xf5/0x200 [ 532.789159][T12237] try_charge_memcg+0xcdf/0x15e0 [ 532.789275][T12237] ? __pfx_try_charge_memcg+0x10/0x10 [ 532.789394][T12237] ? charge_memcg+0x47/0x310 [ 532.789474][T12237] charge_memcg+0x1dd/0x310 [ 532.789546][T12237] __mem_cgroup_charge+0x25/0x80 [ 532.789605][T12237] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 532.789678][T12237] ? filemap_get_entry+0xcd/0x3f0 [ 532.789772][T12237] ? __pfx_filemap_get_entry+0x10/0x10 [ 532.789853][T12237] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 532.789952][T12237] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 532.790069][T12237] shmem_get_folio_gfp+0x5da/0x16d0 [ 532.790187][T12237] shmem_write_begin+0x16c/0x330 [ 532.790282][T12237] generic_perform_write+0x2d5/0x8f0 [ 532.790397][T12237] ? __pfx_generic_perform_write+0x10/0x10 [ 532.790481][T12237] ? __mark_inode_dirty+0x4e7/0x13b0 [ 532.790556][T12237] ? mnt_put_write_access_file+0xc3/0x100 [ 532.790619][T12237] ? file_update_time_flags+0x3ab/0x440 [ 532.790724][T12237] shmem_file_write_iter+0xf8/0x120 [ 532.790808][T12237] __kernel_write_iter+0x44a/0x8f0 [ 532.790907][T12237] ? __pfx___kernel_write_iter+0x10/0x10 [ 532.790991][T12237] ? get_dump_page+0x1e6/0x410 [ 532.791078][T12237] ? __asan_memset+0x22/0x50 [ 532.791163][T12237] ? iov_iter_bvec+0xb8/0x180 [ 532.791237][T12237] dump_user_range+0xc19/0x12c0 [ 532.791390][T12237] ? __pfx_dump_user_range+0x10/0x10 [ 532.791482][T12237] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 532.791572][T12237] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 532.791663][T12237] ? elf_core_dump+0x2a8f/0x3a90 [ 532.791757][T12237] elf_core_dump+0x3485/0x3a90 [ 532.791882][T12237] ? __pfx_elf_core_dump+0x10/0x10 [ 532.791960][T12237] ? get_signal+0x1094/0x12c0 [ 532.792169][T12237] ? lock_acquire+0x115/0x350 [ 532.792232][T12237] ? 0xffffffffff600000 [ 532.792311][T12237] coredump_write+0x1290/0x1960 [ 532.792425][T12237] ? __pfx_coredump_write+0x10/0x10 [ 532.792535][T12237] ? unshare_files+0xab/0x140 [ 532.792616][T12237] vfs_coredump+0x3766/0x4530 [ 532.792772][T12237] ? __pfx_vfs_coredump+0x10/0x10 [ 532.792845][T12237] ? is_bpf_text_address+0x26/0x2b0 [ 532.792937][T12237] ? __lock_acquire+0x6df/0x2e50 [ 532.793020][T12237] ? __lock_acquire+0x6df/0x2e50 [ 532.793136][T12237] ? lock_acquire+0x115/0x350 [ 532.793210][T12237] ? lock_acquire+0x115/0x350 [ 532.793302][T12237] ? is_bpf_text_address+0x26/0x2b0 [ 532.793379][T12237] ? is_bpf_text_address+0x292/0x2b0 [ 532.793450][T12237] ? is_bpf_text_address+0x26/0x2b0 [ 532.793525][T12237] ? kernel_text_address+0xa5/0xe0 [ 532.793585][T12237] ? __kernel_text_address+0xd/0x30 [ 532.793648][T12237] ? unwind_get_return_address+0x4d/0x90 [ 532.793721][T12237] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 532.793813][T12237] ? arch_stack_walk+0xfb/0x150 [ 532.793909][T12237] ? stack_trace_save+0xa9/0x100 [ 532.794002][T12237] ? __pfx_stack_trace_save+0x10/0x10 [ 532.794110][T12237] ? stack_depot_save_flags+0x33/0x7f0 [ 532.794202][T12237] ? __lock_acquire+0x680/0x2e50 [ 532.794267][T12237] ? kasan_save_track+0x4f/0x80 [ 532.794321][T12237] ? kasan_save_track+0x3e/0x80 [ 532.794374][T12237] ? kasan_save_free_info+0x40/0x50 [ 532.794456][T12237] ? __kasan_slab_free+0x5c/0x80 [ 532.794511][T12237] ? kmem_cache_free+0x182/0x650 [ 532.794575][T12237] ? get_signal+0x9e7/0x12c0 [ 532.794639][T12237] ? arch_do_signal_or_restart+0xbb/0x860 [ 532.794714][T12237] ? irqentry_exit+0x2ba/0x910 [ 532.794792][T12237] ? asm_exc_page_fault+0x26/0x30 [ 532.794956][T12237] ? proc_coredump_connector+0x187/0x4e0 [ 532.795093][T12237] ? _raw_spin_unlock_irq+0x23/0x50 [ 532.795180][T12237] get_signal+0x1094/0x12c0 [ 532.795316][T12237] arch_do_signal_or_restart+0xbb/0x860 [ 532.795411][T12237] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 532.795583][T12237] irqentry_exit+0x2ba/0x910 [ 532.795667][T12237] ? trace_irq_disable+0x3b/0x140 [ 532.795733][T12237] asm_exc_page_fault+0x26/0x30 [ 532.795775][T12237] RIP: 0033:0xba766163 [ 532.795866][T12237] Code: Unable to access opcode bytes at 0xba766139. [ 532.795898][T12237] RSP: 002b:00002000000002c8 EFLAGS: 00010217 [ 532.795953][T12237] RAX: 0000000000000000 RBX: 00007fec1fe25fa0 RCX: 00007fec1fb9e159 [ 532.795995][T12237] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000008000000 [ 532.796037][T12237] RBP: 00007fec1fc35024 R08: 0000200000000380 R09: 0000200000000380 [ 532.796090][T12237] R10: 0000200000000340 R11: 0000000000000206 R12: 0000000000000000 [ 532.796131][T12237] R13: 00007fec1fe26038 R14: 00007fec1fe25fa0 R15: 00007fec1ff4fa48 [ 532.796224][T12237] [ 533.181183][T12237] memory: usage 307200kB, limit 307200kB, failcnt 16962 [ 533.181255][T12237] memory+swap: usage 389908kB, limit 9007199254740988kB, failcnt 0 [ 533.181296][T12237] kmem: usage 11304kB, limit 9007199254740988kB, failcnt 0 [ 533.181331][T12237] Memory cgroup stats for /syz4: [ 533.181834][T12237] cache 302669824 [ 533.181859][T12237] rss 315392 [ 533.181889][T12237] rss_huge 0 [ 533.181911][T12237] shmem 302665728 [ 533.181932][T12237] mapped_file 819200 [ 533.181954][T12237] dirty 0 [ 533.181976][T12237] writeback 0 [ 533.181998][T12237] workingset_refault_anon 2127 [ 533.182020][T12237] workingset_refault_file 2374 [ 533.182043][T12237] swap 84692992 [ 533.182071][T12237] swapcached 102002688 [ 533.182096][T12237] pgpgin 243821 [ 533.182124][T12237] pgpgout 170358 [ 533.182152][T12237] pgfault 137603 [ 533.282898][T12237] pgmajfault 399 [ 533.282943][T12237] inactive_anon 1196032 [ 533.282975][T12237] active_anon 301797376 [ 533.283011][T12237] inactive_file 0 [ 533.283035][T12237] active_file 4096 [ 533.283058][T12237] unevictable 0 [ 533.283099][T12237] hierarchical_memory_limit 314572800 [ 533.283122][T12237] hierarchical_memsw_limit 9223372036854771712 [ 533.283152][T12237] total_cache 302669824 [ 533.283174][T12237] total_rss 315392 [ 533.283197][T12237] total_rss_huge 0 [ 533.283219][T12237] total_shmem 302665728 [ 533.283240][T12237] total_mapped_file 819200 [ 533.283270][T12237] total_dirty 0 [ 533.283292][T12237] total_writeback 0 [ 533.283314][T12237] total_workingset_refault_anon 2127 [ 533.283336][T12237] total_workingset_refault_file 2374 [ 533.283366][T12237] total_swap 84692992 [ 533.283389][T12237] total_swapcached 102002688 [ 533.283411][T12237] total_pgpgin 243905 [ 533.283432][T12237] total_pgpgout 170442 [ 533.283465][T12237] total_pgfault 138257 [ 533.283487][T12237] total_pgmajfault 399 [ 533.283509][T12237] total_inactive_anon 1196032 [ 533.283540][T12237] total_active_anon 301797376 [ 533.283563][T12237] total_inactive_file 0 [ 533.283584][T12237] total_active_file 4096 [ 533.283613][T12237] total_unevictable 0 [ 533.283628][T12237] anon_cost 0 [ 533.283657][T12237] file_cost 0 [ 533.283679][T12237] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1675,pid=12252,uid=0 [ 533.290979][T12237] Memory cgroup out of memory: Killed process 12252 (syz.4.1675) total-vm:99072kB, anon-rss:1320kB, file-rss:53828kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 533.810403][T12247] syz.4.1675 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 533.810465][T12247] CPU: 1 UID: 0 PID: 12247 Comm: syz.4.1675 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.810497][T12247] Tainted: [L]=SOFTLOCKUP [ 533.810506][T12247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.810520][T12247] Call Trace: [ 533.810531][T12247] [ 533.810541][T12247] dump_stack_lvl+0xe8/0x150 [ 533.810580][T12247] dump_header+0xd3/0x4b0 [ 533.810613][T12247] oom_kill_process+0x3ab/0x9e0 [ 533.810647][T12247] out_of_memory+0x1064/0x1480 [ 533.810674][T12247] ? try_charge_memcg+0xc32/0x15e0 [ 533.810715][T12247] ? __pfx_out_of_memory+0x10/0x10 [ 533.810740][T12247] ? do_raw_spin_unlock+0xf5/0x200 [ 533.810783][T12247] try_charge_memcg+0xcdf/0x15e0 [ 533.810832][T12247] ? __pfx_try_charge_memcg+0x10/0x10 [ 533.810880][T12247] ? charge_memcg+0x47/0x310 [ 533.810910][T12247] charge_memcg+0x1dd/0x310 [ 533.810939][T12247] __mem_cgroup_charge+0x25/0x80 [ 533.810965][T12247] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 533.810994][T12247] ? filemap_get_entry+0xcd/0x3f0 [ 533.811030][T12247] ? __pfx_filemap_get_entry+0x10/0x10 [ 533.811062][T12247] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 533.811096][T12247] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 533.811131][T12247] shmem_get_folio_gfp+0x5da/0x16d0 [ 533.811177][T12247] shmem_write_begin+0x16c/0x330 [ 533.811234][T12247] generic_perform_write+0x2d5/0x8f0 [ 533.811290][T12247] ? __pfx_generic_perform_write+0x10/0x10 [ 533.811330][T12247] ? down_write+0x16b/0x200 [ 533.811355][T12247] ? generic_write_checks_count+0x41a/0x520 [ 533.811389][T12247] ? file_update_time_flags+0x2d5/0x440 [ 533.811430][T12247] shmem_file_write_iter+0xf8/0x120 [ 533.811465][T12247] __kernel_write_iter+0x44a/0x8f0 [ 533.811506][T12247] ? __pfx___kernel_write_iter+0x10/0x10 [ 533.811537][T12247] ? get_dump_page+0x1e6/0x410 [ 533.811573][T12247] ? __asan_memset+0x22/0x50 [ 533.811621][T12247] ? iov_iter_bvec+0xb8/0x180 [ 533.811649][T12247] dump_user_range+0xc19/0x12c0 [ 533.811694][T12247] ? __pfx_dump_user_range+0x10/0x10 [ 533.811738][T12247] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 533.811779][T12247] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 533.811822][T12247] ? elf_core_dump+0x2a8f/0x3a90 [ 533.811866][T12247] elf_core_dump+0x3485/0x3a90 [ 533.811917][T12247] ? __pfx_elf_core_dump+0x10/0x10 [ 533.811944][T12247] ? kasan_save_track+0x4f/0x80 [ 533.811967][T12247] ? coredump_write+0x394/0x1960 [ 533.811993][T12247] ? vfs_coredump+0x3766/0x4530 [ 533.812029][T12247] ? get_signal+0x1094/0x12c0 [ 533.812056][T12247] ? arch_do_signal_or_restart+0xbb/0x860 [ 533.812088][T12247] ? irqentry_exit+0x2ba/0x910 [ 533.812121][T12247] ? asm_exc_page_fault+0x26/0x30 [ 533.812195][T12247] ? lock_acquire+0x115/0x350 [ 533.812219][T12247] ? 0xffffffffff600000 [ 533.812257][T12247] coredump_write+0x1290/0x1960 [ 533.812309][T12247] ? __pfx_coredump_write+0x10/0x10 [ 533.812365][T12247] ? unshare_files+0xab/0x140 [ 533.812402][T12247] vfs_coredump+0x3766/0x4530 [ 533.812454][T12247] ? __pfx_vfs_coredump+0x10/0x10 [ 533.812483][T12247] ? is_bpf_text_address+0x26/0x2b0 [ 533.812519][T12247] ? __lock_acquire+0x6df/0x2e50 [ 533.812551][T12247] ? __lock_acquire+0x6df/0x2e50 [ 533.812592][T12247] ? lock_acquire+0x115/0x350 [ 533.812624][T12247] ? lock_acquire+0x115/0x350 [ 533.812654][T12247] ? is_bpf_text_address+0x26/0x2b0 [ 533.812683][T12247] ? is_bpf_text_address+0x292/0x2b0 [ 533.812703][T12247] ? is_bpf_text_address+0x26/0x2b0 [ 533.812726][T12247] ? kernel_text_address+0xa5/0xe0 [ 533.812747][T12247] ? __kernel_text_address+0xd/0x30 [ 533.812766][T12247] ? unwind_get_return_address+0x4d/0x90 [ 533.812786][T12247] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 533.812816][T12247] ? arch_stack_walk+0xfb/0x150 [ 533.812846][T12247] ? stack_trace_save+0xa9/0x100 [ 533.812874][T12247] ? __pfx_stack_trace_save+0x10/0x10 [ 533.812903][T12247] ? stack_depot_save_flags+0x33/0x7f0 [ 533.812931][T12247] ? __lock_acquire+0x680/0x2e50 [ 533.812952][T12247] ? kasan_save_track+0x4f/0x80 [ 533.812968][T12247] ? kasan_save_track+0x3e/0x80 [ 533.812984][T12247] ? kasan_save_free_info+0x40/0x50 [ 533.813007][T12247] ? __kasan_slab_free+0x5c/0x80 [ 533.813024][T12247] ? kmem_cache_free+0x182/0x650 [ 533.813040][T12247] ? get_signal+0x9e7/0x12c0 [ 533.813061][T12247] ? arch_do_signal_or_restart+0xbb/0x860 [ 533.813085][T12247] ? irqentry_exit+0x2ba/0x910 [ 533.813111][T12247] ? asm_exc_page_fault+0x26/0x30 [ 533.813161][T12247] ? proc_coredump_connector+0x187/0x4e0 [ 533.813199][T12247] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.813226][T12247] get_signal+0x1094/0x12c0 [ 533.813266][T12247] arch_do_signal_or_restart+0xbb/0x860 [ 533.813294][T12247] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 533.813347][T12247] irqentry_exit+0x2ba/0x910 [ 533.813373][T12247] ? trace_irq_disable+0x3b/0x140 [ 533.813395][T12247] asm_exc_page_fault+0x26/0x30 [ 533.813412][T12247] RIP: 0033:0xba766163 [ 533.813435][T12247] Code: Unable to access opcode bytes at 0xba766139. [ 533.813444][T12247] RSP: 002b:00002000000002c8 EFLAGS: 00010217 [ 533.813461][T12247] RAX: 0000000000000000 RBX: 00007fec1fe25fa0 RCX: 00007fec1fb9e159 [ 533.813474][T12247] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000008000000 [ 533.813486][T12247] RBP: 00007fec1fc35024 R08: 0000200000000380 R09: 0000200000000380 [ 533.813499][T12247] R10: 0000200000000340 R11: 0000000000000206 R12: 0000000000000000 [ 533.813510][T12247] R13: 00007fec1fe26038 R14: 00007fec1fe25fa0 R15: 00007fec1ff4fa48 [ 533.813538][T12247] [ 534.081693][T12247] memory: usage 307200kB, limit 307200kB, failcnt 17089 [ 534.081790][T12247] memory+swap: usage 389908kB, limit 9007199254740988kB, failcnt 0 [ 534.081846][T12247] kmem: usage 11304kB, limit 9007199254740988kB, failcnt 0 [ 534.081871][T12247] Memory cgroup stats for /syz4: [ 534.082208][T12247] cache 302669824 [ 534.082247][T12247] rss 315392 [ 534.082271][T12247] rss_huge 0 [ 534.082299][T12247] shmem 302669824 [ 534.082314][T12247] mapped_file 815104 [ 534.082336][T12247] dirty 0 [ 534.082358][T12247] writeback 0 [ 534.082379][T12247] workingset_refault_anon 2127 [ 534.082402][T12247] workingset_refault_file 2375 [ 534.082432][T12247] swap 84692992 [ 534.082454][T12247] swapcached 102002688 [ 534.082476][T12247] pgpgin 243823 [ 534.082499][T12247] pgpgout 170360 [ 534.082522][T12247] pgfault 137604 [ 534.082544][T12247] pgmajfault 401 [ 534.082566][T12247] inactive_anon 301797376 [ 534.082588][T12247] active_anon 1200128 [ 534.082620][T12247] inactive_file 0 [ 534.082641][T12247] active_file 0 [ 534.082670][T12247] unevictable 0 [ 534.082694][T12247] hierarchical_memory_limit 314572800 [ 534.082718][T12247] hierarchical_memsw_limit 9223372036854771712 [ 534.082749][T12247] total_cache 302669824 [ 534.082765][T12247] total_rss 315392 [ 534.082801][T12247] total_rss_huge 0 [ 534.082822][T12247] total_shmem 302669824 [ 534.082852][T12247] total_mapped_file 815104 [ 534.082874][T12247] total_dirty 0 [ 534.082896][T12247] total_writeback 0 [ 534.082919][T12247] total_workingset_refault_anon 2127 [ 534.082942][T12247] total_workingset_refault_file 2375 [ 534.082973][T12247] total_swap 84692992 [ 534.082997][T12247] total_swapcached 102002688 [ 534.141565][T12247] total_pgpgin 243907 [ 534.141641][T12247] total_pgpgout 170444 [ 534.141671][T12247] total_pgfault 138258 [ 534.141693][T12247] total_pgmajfault 401 [ 534.141714][T12247] total_inactive_anon 301797376 [ 534.141736][T12247] total_active_anon 1200128 [ 534.141762][T12247] total_inactive_file 0 [ 534.141795][T12247] total_active_file 0 [ 534.141825][T12247] total_unevictable 0 [ 534.141847][T12247] anon_cost 0 [ 534.141869][T12247] file_cost 0 [ 534.141885][T12247] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1675,pid=12249,uid=0 [ 534.142202][T12247] Memory cgroup out of memory: Killed process 12249 (syz.4.1675) total-vm:99072kB, anon-rss:1268kB, file-rss:53828kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 534.680228][T12494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.737730][ T12] net_ratelimit: 29 callbacks suppressed [ 534.737784][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 534.893741][T12499] netlink: 'syz.3.1745': attribute type 16 has an invalid length. [ 534.905150][T12499] netlink: 'syz.3.1745': attribute type 17 has an invalid length. [ 534.994900][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.005659][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.027244][ T8444] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 535.076902][ T8439] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 535.187557][ T8444] usb 3-1: New USB device found, idVendor=a168, idProduct=0610, bcdDevice=62.ac [ 535.198760][ T8444] usb 3-1: config 34 has an invalid interface number: 153 but max is 0 [ 535.198812][ T8444] usb 3-1: config 34 has no interface number 0 [ 535.198862][ T8444] usb 3-1: config 34 interface 153 has no altsetting 0 [ 535.226268][ T8444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.226316][ T8444] usb 3-1: Product: syz [ 535.226351][ T8444] usb 3-1: Manufacturer: syz [ 535.226373][ T8444] usb 3-1: SerialNumber: syz [ 535.251635][ T8439] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 535.262593][ T8439] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.262662][ T8439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.331088][T12499] dummy0: left promiscuous mode [ 535.430806][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.431069][T12499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.459536][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.459759][T12499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.507032][ T8444] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0610 [ 535.514596][ T8444] gspca_sn9c20x: Write register 1000 failed -71 [ 535.521452][ T8444] gspca_sn9c20x: Device initialization failed [ 535.521572][ T8444] gspca_sn9c20x 3-1:34.153: probe with driver gspca_sn9c20x failed with error -71 [ 535.551466][ T8444] usb 3-1: USB disconnect, device number 13 [ 535.649579][T12499] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 535.687297][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 535.689612][T12511] syzkaller0: entered promiscuous mode [ 535.689679][T12511] syzkaller0: entered allmulticast mode [ 535.833407][ T8439] wacom 0003:056A:033B.0017: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 535.854610][ T8439] wacom 0003:056A:033B.0017: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 535.870702][ T8439] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0017/input/input46 [ 535.977247][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 536.086788][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 536.115995][ T8459] usb 2-1: USB disconnect, device number 3 [ 536.198380][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 536.308069][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 536.415124][T12522] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 536.433805][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 536.540514][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 536.647069][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 536.803561][T12532] vivid-001: ================= START STATUS ================= [ 536.803606][T12532] vivid-001: Radio HW Seek Mode: Bounded [ 536.803662][T12532] vivid-001: Radio Programmable HW Seek: false [ 536.803697][T12532] vivid-001: RDS Rx I/O Mode: Block I/O [ 536.803730][T12532] vivid-001: Generate RBDS Instead of RDS: false [ 536.803764][T12532] vivid-001: RDS Reception: true [ 536.803797][T12532] vivid-001: RDS Program Type: 0 inactive [ 536.803839][T12532] vivid-001: RDS PS Name: inactive [ 536.803879][T12532] vivid-001: RDS Radio Text: inactive [ 536.803919][T12532] vivid-001: RDS Traffic Announcement: false inactive [ 536.803960][T12532] vivid-001: RDS Traffic Program: false inactive [ 536.804001][T12532] vivid-001: RDS Music: false inactive [ 536.804042][T12532] vivid-001: ================== END STATUS ================== [ 538.404704][T12252] syz.4.1675 (12252) used greatest stack depth: 15608 bytes left [ 539.787323][ T9553] net_ratelimit: 6 callbacks suppressed [ 539.788177][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 539.878671][T12569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.896714][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 539.904311][T12569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.026724][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 540.137317][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 540.167723][ T8457] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 540.256748][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 540.328541][ T8457] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 540.344750][ T8457] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 540.344821][ T8457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 540.366802][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 540.372050][ T8457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.372130][ T8457] usb 3-1: Product: syz [ 540.372174][ T8457] usb 3-1: Manufacturer: syz [ 540.372211][ T8457] usb 3-1: SerialNumber: syz [ 540.410541][ T8457] usb 3-1: config 0 descriptor?? [ 540.474523][T12566] kvm: pic: non byte write [ 540.477333][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 540.586731][ T8915] bond1: (slave bridge1): failed to get link speed/duplex [ 540.662016][T12568] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1764'. [ 540.697547][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 540.963099][ T8457] usb 3-1: USB disconnect, device number 14 [ 540.996743][ T8915] bond1: (slave bridge1): failed to get link speed/duplex [ 541.116743][T10291] udevd[10291]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.218761][T12580] FAULT_INJECTION: forcing a failure. [ 541.218761][T12580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.218834][T12580] CPU: 0 UID: 0 PID: 12580 Comm: syz.1.1767 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.218867][T12580] Tainted: [L]=SOFTLOCKUP [ 541.218876][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.218890][T12580] Call Trace: [ 541.218900][T12580] [ 541.218910][T12580] dump_stack_lvl+0xe8/0x150 [ 541.219020][T12580] should_fail_ex+0x410/0x560 [ 541.219107][T12580] _copy_from_user+0x2d/0xb0 [ 541.219190][T12580] kstrtouint_from_user+0xd6/0x180 [ 541.219285][T12580] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 541.219398][T12580] ? lock_acquire+0x115/0x350 [ 541.219466][T12580] proc_fail_nth_write+0x8e/0x210 [ 541.219614][T12580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 541.219727][T12580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 541.219814][T12580] vfs_write+0x296/0xba0 [ 541.219922][T12580] ? __pfx_vfs_write+0x10/0x10 [ 541.220015][T12580] ? __fget_files+0x2a/0x420 [ 541.220095][T12580] ? __fget_files+0x3a2/0x420 [ 541.220169][T12580] ? __fget_files+0x2a/0x420 [ 541.220265][T12580] ksys_write+0x150/0x270 [ 541.220354][T12580] ? __pfx_ksys_write+0x10/0x10 [ 541.220489][T12580] do_syscall_64+0x166/0x520 [ 541.220592][T12580] ? trace_irq_disable+0x3b/0x140 [ 541.220654][T12580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.220710][T12580] ? clear_bhb_loop+0x70/0xc0 [ 541.220783][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.220839][T12580] RIP: 0033:0x7fd27475e98e [ 541.220901][T12580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 541.220955][T12580] RSP: 002b:00007fd2756a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.221019][T12580] RAX: ffffffffffffffda RBX: 00007fd2756a96c0 RCX: 00007fd27475e98e [ 541.221062][T12580] RDX: 0000000000000001 RSI: 00007fd2756a90a0 RDI: 0000000000000006 [ 541.221097][T12580] RBP: 00007fd2756a9090 R08: 0000000000000000 R09: 0000000000000000 [ 541.221137][T12580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.221170][T12580] R13: 00007fd274a26038 R14: 00007fd274a25fa0 R15: 00007fd274b4fa48 [ 541.221263][T12580] [ 541.799858][T12593] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1771'. [ 541.862893][T12594] IPVS: Error connecting to the multicast addr [ 541.969637][T12597] syzkaller0: entered promiscuous mode [ 541.969689][T12597] syzkaller0: entered allmulticast mode [ 542.124631][T12241] syz.4.1675 (12241) used greatest stack depth: 15328 bytes left [ 542.248070][ T31] audit: type=1326 audit(1788663851.166:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.0.1775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 542.248150][ T31] audit: type=1326 audit(1788663851.166:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.0.1775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 542.251075][ T31] audit: type=1326 audit(1788663851.166:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.0.1775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 542.251246][ T31] audit: type=1326 audit(1788663851.166:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.0.1775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 542.252538][ T31] audit: type=1326 audit(1788663851.166:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.0.1775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1c955e98e code=0x7ffc0000 [ 542.255992][ T31] audit: type=1326 audit(1788663851.166:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.0.1775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1c955e98e code=0x7ffc0000 [ 542.273686][ T31] audit: type=1326 audit(1788663851.166:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.0.1775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 542.273744][ T31] audit: type=1326 audit(1788663851.186:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.0.1775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe1c955e98e code=0x7ffc0000 [ 542.273792][ T31] audit: type=1326 audit(1788663851.186:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.0.1775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1c955e98e code=0x7ffc0000 [ 542.273838][ T31] audit: type=1326 audit(1788663851.186:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.0.1775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe1c955e98e code=0x7ffc0000 [ 542.498860][ T8444] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 542.656686][ T8444] usb 5-1: Using ep0 maxpacket: 8 [ 542.663053][ T8444] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 542.676604][ T8444] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.688313][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 542.689282][ T8444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 542.689337][ T8444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.726007][ T8444] usb 5-1: config 0 descriptor?? [ 542.951445][T12622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.952662][T12622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.176827][ T8439] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 543.336869][ T8439] usb 2-1: Using ep0 maxpacket: 16 [ 543.343069][ T8439] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 543.354201][ T8439] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 543.354306][ T8439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 543.380587][ T8439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.388873][ T8439] usb 2-1: Product: syz [ 543.388966][ T8439] usb 2-1: Manufacturer: syz [ 543.388990][ T8439] usb 2-1: SerialNumber: syz [ 543.409565][ T8439] usb 2-1: config 0 descriptor?? [ 543.429414][ T8439] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 543.438938][ T8439] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 543.582871][T12627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.589326][T12627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.967650][ T8444] usbhid 5-1:0.0: can't add hid device: -71 [ 543.973886][ T8444] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 543.992188][ T8444] usb 5-1: USB disconnect, device number 116 [ 544.024397][ T8439] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 544.232987][T12629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1782'. [ 544.242378][ T8439] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 544.250232][ T8439] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 544.250274][ T8439] em28xx 2-1:0.0: No AC97 audio processor [ 544.271460][ T8439] usb 2-1: USB disconnect, device number 4 [ 544.282526][ T8439] em28xx 2-1:0.0: Disconnecting em28xx [ 544.296073][ T8439] em28xx: Freeing device [ 545.026279][T12644] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.028218][T12644] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.042952][T12647] net_ratelimit: 25 callbacks suppressed [ 545.057281][T12647] openvswitch: netlink: Flow actions attr not present in new flow. [ 545.130676][T12644] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.130868][T12644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.131178][T12644] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.131272][T12644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.206243][T12644] team0: Port device bridge0 added [ 545.217946][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 545.328647][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 545.437574][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 545.466056][T12659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.479834][T12659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.547277][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 545.569898][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.576916][ T8457] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 545.589128][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.656681][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 545.726859][ T8457] usb 2-1: Using ep0 maxpacket: 32 [ 545.729101][ T8457] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 545.751044][ T8457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 545.751106][ T8457] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.751153][ T8457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 545.751184][ T8457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 545.767168][ T1380] bond1: (slave bridge1): failed to get link speed/duplex [ 545.794326][ T8457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.794397][ T8457] usb 2-1: Product: syz [ 545.794441][ T8457] usb 2-1: Manufacturer: syz [ 545.794483][ T8457] usb 2-1: SerialNumber: syz [ 545.834369][ T8457] usb 2-1: config 0 descriptor?? [ 545.860448][T12650] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 545.878280][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 545.975242][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 545.984483][T12667] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1792'. [ 546.003515][ T8457] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input49 [ 546.181520][T12667] batadv_slave_0: Caught tx_queue_len zero misconfig [ 546.181589][T12667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1792'. [ 546.547041][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 546.747186][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 547.952760][ T8457] usb 2-1: USB disconnect, device number 5 [ 547.952810][ C1] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 548.123065][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1799'. [ 548.376746][ T8459] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 548.527123][ T8459] usb 5-1: Using ep0 maxpacket: 8 [ 548.528349][ T8459] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 548.545055][ T8459] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 548.585474][ T8459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.585526][ T8459] usb 5-1: Product: syz [ 548.585561][ T8459] usb 5-1: Manufacturer: syz [ 548.585622][ T8459] usb 5-1: SerialNumber: syz [ 548.629567][ T8459] ch9200 5-1:2.0: probe with driver ch9200 failed with error -22 [ 549.787843][T12733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1809'. [ 550.176835][ T91] net_ratelimit: 21 callbacks suppressed [ 550.176898][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 550.287702][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 550.596667][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 550.708069][T12743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.708522][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 550.731121][T12743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.817054][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 550.928867][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 551.036793][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 551.147987][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 551.158915][ T8457] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 551.321361][ T8457] usb 3-1: Using ep0 maxpacket: 16 [ 551.325033][ T8457] usb 3-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 551.343398][ T8457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.343451][ T8457] usb 3-1: Product: syz [ 551.343469][ T8457] usb 3-1: Manufacturer: syz [ 551.343485][ T8457] usb 3-1: SerialNumber: syz [ 551.385602][ T8457] usb 3-1: config 0 descriptor?? [ 551.410985][ T8457] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 551.418828][T12749] openvswitch: netlink: Flow key attr not present in new flow. [ 551.477172][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 551.494988][ T5709] usb 5-1: USB disconnect, device number 117 [ 551.713699][ T31] kauditd_printk_skb: 130 callbacks suppressed [ 551.713760][ T31] audit: type=1326 audit(1788663860.626:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.0.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 551.713864][ T31] audit: type=1326 audit(1788663860.626:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.0.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 551.714077][ T31] audit: type=1326 audit(1788663860.626:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.0.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 551.714187][ T31] audit: type=1326 audit(1788663860.626:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.0.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 551.714302][ T31] audit: type=1326 audit(1788663860.626:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.0.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 551.735510][ T8457] pwc: send_video_command error -71 [ 551.735574][ T8457] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 551.735845][ T8457] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 551.789419][ T31] audit: type=1326 audit(1788663860.696:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.0.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 551.789624][ T31] audit: type=1326 audit(1788663860.696:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.0.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 551.789746][ T31] audit: type=1326 audit(1788663860.696:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.0.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 551.827865][ T31] audit: type=1326 audit(1788663860.736:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.0.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 551.829065][ T31] audit: type=1326 audit(1788663860.746:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.0.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c959e159 code=0x7ffc0000 [ 551.845816][ T8457] usb 3-1: USB disconnect, device number 15 [ 552.071877][T12753] input: syz0 as /devices/virtual/input/input50 [ 552.182657][T12756] loop5: detected capacity change from 0 to 7 [ 552.201585][T12756] Dev loop5: unable to read RDB block 7 [ 552.201670][T12756] loop5: unable to read partition table [ 552.202306][T12756] loop5: partition table beyond EOD, truncated [ 552.202403][T12756] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 552.637113][T12764] program syz.4.1822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.697836][T12765] program syz.4.1822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.039903][T12773] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 553.735168][T12796] FAULT_INJECTION: forcing a failure. [ 553.735168][T12796] name failslab, interval 1, probability 0, space 0, times 0 [ 553.753549][T12796] CPU: 1 UID: 0 PID: 12796 Comm: syz.2.1833 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.753584][T12796] Tainted: [L]=SOFTLOCKUP [ 553.753593][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.753607][T12796] Call Trace: [ 553.753617][T12796] [ 553.753628][T12796] dump_stack_lvl+0xe8/0x150 [ 553.753667][T12796] should_fail_ex+0x410/0x560 [ 553.753708][T12796] should_failslab+0xa8/0x100 [ 553.753736][T12796] ? sctp_chunkify+0x5a/0x260 [ 553.753767][T12796] kmem_cache_alloc_noprof+0xa1/0x600 [ 553.753801][T12796] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 553.753833][T12796] ? __alloc_skb+0x27a/0x7a0 [ 553.753856][T12796] ? sctp_chunkify+0x5a/0x260 [ 553.753893][T12796] sctp_chunkify+0x5a/0x260 [ 553.753938][T12796] _sctp_make_chunk+0x122/0x290 [ 553.753973][T12796] sctp_make_init_ack+0x957/0x1310 [ 553.754016][T12796] ? __pfx_sctp_make_init_ack+0x10/0x10 [ 553.754048][T12796] ? sctp_add_bind_addr+0x203/0x370 [ 553.754086][T12796] ? sctp_tietags_populate+0x84/0x490 [ 553.754116][T12796] sctp_sf_do_unexpected_init+0xdbc/0x1340 [ 553.754157][T12796] ? __pfx_sctp_sf_do_unexpected_init+0x10/0x10 [ 553.754187][T12796] ? sctp_do_sm+0x564b/0x5dd0 [ 553.754222][T12796] sctp_do_sm+0x239/0x5dd0 [ 553.754248][T12796] ? __pfx_sctp_cname+0x10/0x10 [ 553.754272][T12796] ? do_raw_spin_lock+0x12b/0x2f0 [ 553.754315][T12796] ? __pfx_sctp_do_sm+0x10/0x10 [ 553.754381][T12796] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 553.754407][T12796] ? lockdep_hardirqs_on+0x7b/0x110 [ 553.754440][T12796] ? seqcount_lockdep_reader_access+0xea/0x100 [ 553.754469][T12796] sctp_assoc_bh_rcv+0x401/0x6f0 [ 553.754508][T12796] sctp_backlog_rcv+0x15c/0x370 [ 553.754535][T12796] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 553.754556][T12796] __release_sock+0x28b/0x390 [ 553.754592][T12796] release_sock+0x190/0x260 [ 553.754629][T12796] sctp_sendmsg+0x1c09/0x2d00 [ 553.754673][T12796] ? kstrtouint+0x6e/0xe0 [ 553.754704][T12796] ? __pfx_sctp_sendmsg+0x10/0x10 [ 553.754735][T12796] ? lock_acquire+0x115/0x350 [ 553.754756][T12796] ? get_pid_task+0x20/0x1f0 [ 553.754789][T12796] ? aa_sock_msg_perm+0xf5/0x210 [ 553.754810][T12796] ? sock_rps_record_flow+0x19/0x350 [ 553.754839][T12796] ? inet_sendmsg+0x298/0x320 [ 553.754862][T12796] ? apparmor_socket_sendmsg+0x27b/0x360 [ 553.754898][T12796] ? __pfx_inet_sendmsg+0x10/0x10 [ 553.754930][T12796] sock_sendmsg_nosec+0x10e/0x180 [ 553.754960][T12796] __sys_sendto+0x408/0x5a0 [ 553.754979][T12796] ? ksys_write+0x1e6/0x270 [ 553.755011][T12796] ? __pfx___sys_sendto+0x10/0x10 [ 553.755028][T12796] ? __mutex_unlock_slowpath+0x731/0x900 [ 553.755084][T12796] ? __pfx_ksys_write+0x10/0x10 [ 553.755116][T12796] __x64_sys_sendto+0xde/0x100 [ 553.755140][T12796] do_syscall_64+0x166/0x520 [ 553.755168][T12796] ? trace_irq_disable+0x3b/0x140 [ 553.755188][T12796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.755208][T12796] ? clear_bhb_loop+0x70/0xc0 [ 553.755232][T12796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.755252][T12796] RIP: 0033:0x7f6b3919e159 [ 553.755271][T12796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.755289][T12796] RSP: 002b:00007f6b3a04d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 553.755312][T12796] RAX: ffffffffffffffda RBX: 00007f6b39425fa0 RCX: 00007f6b3919e159 [ 553.755327][T12796] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 553.755341][T12796] RBP: 00007f6b3a04d090 R08: 0000200000000140 R09: 000000000000001c [ 553.755354][T12796] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 553.755367][T12796] R13: 00007f6b39426038 R14: 00007f6b39425fa0 R15: 00007f6b3954fa48 [ 553.755397][T12796] [ 554.196688][ T8444] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 554.265047][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.276334][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.379431][ T8444] usb 2-1: Using ep0 maxpacket: 16 [ 554.394405][ T8444] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.410215][ T8444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.410263][ T8444] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.434077][ T8444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.434125][ T8444] usb 2-1: Product: syz [ 554.434185][ T8444] usb 2-1: Manufacturer: syz [ 554.434208][ T8444] usb 2-1: SerialNumber: syz [ 554.475507][ T8444] usb 2-1: skipping empty audio interface (v1) [ 554.604546][ T8444] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 554.664721][T10740] udevd[10740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.815774][T12808] pic_ioport_write: 37 callbacks suppressed [ 554.822088][T12808] kvm: pic: level sensitive irq not supported [ 554.912386][ T8444] usb 2-1: USB disconnect, device number 6 [ 555.169023][T12816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.182751][T12816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.247400][ T9553] net_ratelimit: 32 callbacks suppressed [ 555.247462][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 555.356710][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 555.469650][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 555.576878][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 555.638205][T12823] netlink: NAT attribute type 0 has unexpected length (2 != 0) [ 555.638267][T12823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.686769][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 555.839149][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 555.891126][T12828] FAULT_INJECTION: forcing a failure. [ 555.891126][T12828] name failslab, interval 1, probability 0, space 0, times 0 [ 555.891198][T12828] CPU: 0 UID: 0 PID: 12828 Comm: syz.3.1845 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.891230][T12828] Tainted: [L]=SOFTLOCKUP [ 555.891238][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.891306][T12828] Call Trace: [ 555.891337][T12828] [ 555.891373][T12828] dump_stack_lvl+0xe8/0x150 [ 555.891488][T12828] should_fail_ex+0x410/0x560 [ 555.891581][T12828] should_failslab+0xa8/0x100 [ 555.891663][T12828] __kmalloc_cache_noprof+0xa3/0x600 [ 555.891757][T12828] ? __kmalloc_cache_noprof+0x14d/0x600 [ 555.891841][T12828] ? sctp_add_bind_addr+0x8c/0x370 [ 555.891913][T12828] ? sctp_add_bind_addr+0x8c/0x370 [ 555.892009][T12828] sctp_add_bind_addr+0x8c/0x370 [ 555.892104][T12828] sctp_copy_local_addr_list+0x31a/0x4e0 [ 555.892174][T12828] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 555.892249][T12828] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 555.892333][T12828] ? sctp_v6_is_any+0x64/0x80 [ 555.892425][T12828] ? sctp_copy_one_addr+0x93/0x360 [ 555.892509][T12828] sctp_bind_addr_copy+0xb3/0x3c0 [ 555.892577][T12828] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 555.892626][T12828] sctp_connect_new_asoc+0x2ff/0x6b0 [ 555.892728][T12828] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 555.892854][T12828] ? __local_bh_enable_ip+0xd6/0x140 [ 555.892933][T12828] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 555.893009][T12828] ? security_sctp_bind_connect+0x7e/0x2c0 [ 555.893117][T12828] sctp_sendmsg+0x159b/0x2d00 [ 555.893233][T12828] ? kstrtouint+0x6e/0xe0 [ 555.893311][T12828] ? __pfx_sctp_sendmsg+0x10/0x10 [ 555.893389][T12828] ? lock_acquire+0x115/0x350 [ 555.893462][T12828] ? get_pid_task+0x20/0x1f0 [ 555.893558][T12828] ? aa_sock_msg_perm+0xf5/0x210 [ 555.893617][T12828] ? sock_rps_record_flow+0x19/0x350 [ 555.893709][T12828] ? inet_sendmsg+0x298/0x320 [ 555.893784][T12828] ? __pfx_inet_sendmsg+0x10/0x10 [ 555.893857][T12828] sock_sendmsg_nosec+0x10e/0x180 [ 555.893950][T12828] __sys_sendto+0x408/0x5a0 [ 555.894004][T12828] ? ksys_write+0x1e6/0x270 [ 555.894094][T12828] ? __pfx___sys_sendto+0x10/0x10 [ 555.894160][T12828] ? __mutex_unlock_slowpath+0x731/0x900 [ 555.894341][T12828] ? __pfx_ksys_write+0x10/0x10 [ 555.894437][T12828] __x64_sys_sendto+0xde/0x100 [ 555.894509][T12828] do_syscall_64+0x166/0x520 [ 555.894585][T12828] ? trace_irq_disable+0x3b/0x140 [ 555.894639][T12828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.894701][T12828] ? clear_bhb_loop+0x70/0xc0 [ 555.894774][T12828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.894834][T12828] RIP: 0033:0x7fb824d9e159 [ 555.894888][T12828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.894939][T12828] RSP: 002b:00007fb825c46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 555.895002][T12828] RAX: ffffffffffffffda RBX: 00007fb825025fa0 RCX: 00007fb824d9e159 [ 555.895052][T12828] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 555.895089][T12828] RBP: 00007fb825c46090 R08: 0000200000000140 R09: 000000000000001c [ 555.895129][T12828] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 555.895172][T12828] R13: 00007fb825026038 R14: 00007fb825025fa0 R15: 00007fb82514fa48 [ 555.895258][T12828] [ 556.121872][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 556.229100][ T9553] bond1: (slave bridge1): failed to get link speed/duplex [ 556.599511][T12848] syz_tun: entered promiscuous mode [ 556.641658][T12848] syz_tun: left promiscuous mode [ 556.819874][T12853] trusted_key: encrypted_key: keylen parameter is missing [ 556.947084][ T8459] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 557.096817][ T8459] usb 3-1: Using ep0 maxpacket: 8 [ 557.098739][ T8459] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 557.115585][ T8459] usb 3-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 557.141285][ T8459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.141366][ T8459] usb 3-1: Product: syz [ 557.141408][ T8459] usb 3-1: Manufacturer: syz [ 557.141453][ T8459] usb 3-1: SerialNumber: syz [ 557.172011][ T8459] usb 3-1: config 0 descriptor?? [ 557.552328][ T8459] usb 3-1: USB disconnect, device number 16 [ 557.770082][T12870] FAULT_INJECTION: forcing a failure. [ 557.770082][T12870] name failslab, interval 1, probability 0, space 0, times 0 [ 557.787493][T12870] CPU: 1 UID: 0 PID: 12870 Comm: syz.3.1858 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.787531][T12870] Tainted: [L]=SOFTLOCKUP [ 557.787540][T12870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.787567][T12870] Call Trace: [ 557.787577][T12870] [ 557.787588][T12870] dump_stack_lvl+0xe8/0x150 [ 557.787627][T12870] should_fail_ex+0x410/0x560 [ 557.787667][T12870] should_failslab+0xa8/0x100 [ 557.787696][T12870] __kmalloc_cache_noprof+0xa3/0x600 [ 557.787733][T12870] ? __kmalloc_cache_noprof+0x14d/0x600 [ 557.787767][T12870] ? sctp_add_bind_addr+0x8c/0x370 [ 557.787798][T12870] ? sctp_add_bind_addr+0x8c/0x370 [ 557.787834][T12870] sctp_add_bind_addr+0x8c/0x370 [ 557.787869][T12870] sctp_copy_local_addr_list+0x31a/0x4e0 [ 557.787902][T12870] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 557.787932][T12870] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 557.787962][T12870] ? sctp_v6_is_any+0x64/0x80 [ 557.787995][T12870] ? sctp_copy_one_addr+0x93/0x360 [ 557.788029][T12870] sctp_bind_addr_copy+0xb3/0x3c0 [ 557.788059][T12870] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 557.788090][T12870] sctp_connect_new_asoc+0x2ff/0x6b0 [ 557.788128][T12870] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 557.788171][T12870] ? __local_bh_enable_ip+0xd6/0x140 [ 557.788200][T12870] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 557.788231][T12870] ? security_sctp_bind_connect+0x7e/0x2c0 [ 557.788269][T12870] sctp_sendmsg+0x159b/0x2d00 [ 557.788315][T12870] ? kstrtouint+0x6e/0xe0 [ 557.788348][T12870] ? __pfx_sctp_sendmsg+0x10/0x10 [ 557.788382][T12870] ? lock_acquire+0x115/0x350 [ 557.788405][T12870] ? get_pid_task+0x20/0x1f0 [ 557.788445][T12870] ? aa_sock_msg_perm+0xf5/0x210 [ 557.788468][T12870] ? sock_rps_record_flow+0x19/0x350 [ 557.788502][T12870] ? inet_sendmsg+0x298/0x320 [ 557.788534][T12870] ? __pfx_inet_sendmsg+0x10/0x10 [ 557.788570][T12870] sock_sendmsg_nosec+0x10e/0x180 [ 557.788608][T12870] __sys_sendto+0x408/0x5a0 [ 557.788631][T12870] ? ksys_write+0x1e6/0x270 [ 557.788668][T12870] ? __pfx___sys_sendto+0x10/0x10 [ 557.788689][T12870] ? __mutex_unlock_slowpath+0x731/0x900 [ 557.788756][T12870] ? __pfx_ksys_write+0x10/0x10 [ 557.788795][T12870] __x64_sys_sendto+0xde/0x100 [ 557.788823][T12870] do_syscall_64+0x166/0x520 [ 557.788879][T12870] ? trace_irq_disable+0x3b/0x140 [ 557.788901][T12870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.788925][T12870] ? clear_bhb_loop+0x70/0xc0 [ 557.788955][T12870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.788979][T12870] RIP: 0033:0x7fb824d9e159 [ 557.789001][T12870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.789021][T12870] RSP: 002b:00007fb825c46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 557.789047][T12870] RAX: ffffffffffffffda RBX: 00007fb825025fa0 RCX: 00007fb824d9e159 [ 557.789065][T12870] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 557.789080][T12870] RBP: 00007fb825c46090 R08: 0000200000000140 R09: 000000000000001c [ 557.789096][T12870] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 557.789111][T12870] R13: 00007fb825026038 R14: 00007fb825025fa0 R15: 00007fb82514fa48 [ 557.789147][T12870] [ 559.036675][ T8445] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 559.143140][T12917] FAULT_INJECTION: forcing a failure. [ 559.143140][T12917] name failslab, interval 1, probability 0, space 0, times 0 [ 559.156701][T12917] CPU: 1 UID: 0 PID: 12917 Comm: syz.1.1870 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.156737][T12917] Tainted: [L]=SOFTLOCKUP [ 559.156747][T12917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 559.156761][T12917] Call Trace: [ 559.156776][T12917] [ 559.156783][T12917] dump_stack_lvl+0xe8/0x150 [ 559.156833][T12917] should_fail_ex+0x410/0x560 [ 559.156863][T12917] should_failslab+0xa8/0x100 [ 559.156884][T12917] __kmalloc_cache_noprof+0xa3/0x600 [ 559.156911][T12917] ? __kmalloc_cache_noprof+0x14d/0x600 [ 559.156935][T12917] ? sctp_add_bind_addr+0x8c/0x370 [ 559.156955][T12917] ? sctp_add_bind_addr+0x8c/0x370 [ 559.156980][T12917] sctp_add_bind_addr+0x8c/0x370 [ 559.157003][T12917] sctp_copy_local_addr_list+0x31a/0x4e0 [ 559.157026][T12917] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 559.157047][T12917] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 559.157068][T12917] ? sctp_v6_is_any+0x64/0x80 [ 559.157091][T12917] ? sctp_copy_one_addr+0x93/0x360 [ 559.157114][T12917] sctp_bind_addr_copy+0xb3/0x3c0 [ 559.157134][T12917] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 559.157155][T12917] sctp_connect_new_asoc+0x2ff/0x6b0 [ 559.157182][T12917] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 559.157212][T12917] ? __local_bh_enable_ip+0xd6/0x140 [ 559.157232][T12917] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 559.157253][T12917] ? security_sctp_bind_connect+0x7e/0x2c0 [ 559.157279][T12917] sctp_sendmsg+0x159b/0x2d00 [ 559.157314][T12917] ? kstrtouint+0x6e/0xe0 [ 559.157339][T12917] ? __pfx_sctp_sendmsg+0x10/0x10 [ 559.157362][T12917] ? lock_acquire+0x115/0x350 [ 559.157379][T12917] ? get_pid_task+0x20/0x1f0 [ 559.157406][T12917] ? aa_sock_msg_perm+0xf5/0x210 [ 559.157423][T12917] ? sock_rps_record_flow+0x19/0x350 [ 559.157447][T12917] ? inet_sendmsg+0x298/0x320 [ 559.157471][T12917] ? __pfx_inet_sendmsg+0x10/0x10 [ 559.157495][T12917] sock_sendmsg_nosec+0x10e/0x180 [ 559.157521][T12917] __sys_sendto+0x408/0x5a0 [ 559.157537][T12917] ? ksys_write+0x1e6/0x270 [ 559.157563][T12917] ? __pfx___sys_sendto+0x10/0x10 [ 559.157583][T12917] ? __mutex_unlock_slowpath+0x731/0x900 [ 559.157640][T12917] ? __pfx_ksys_write+0x10/0x10 [ 559.157668][T12917] __x64_sys_sendto+0xde/0x100 [ 559.157686][T12917] do_syscall_64+0x166/0x520 [ 559.157711][T12917] ? trace_irq_disable+0x3b/0x140 [ 559.157726][T12917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.157743][T12917] ? clear_bhb_loop+0x70/0xc0 [ 559.157762][T12917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.157779][T12917] RIP: 0033:0x7fd27479e159 [ 559.157794][T12917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.157814][T12917] RSP: 002b:00007fd2756a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 559.157831][T12917] RAX: ffffffffffffffda RBX: 00007fd274a25fa0 RCX: 00007fd27479e159 [ 559.157844][T12917] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 559.157855][T12917] RBP: 00007fd2756a9090 R08: 0000200000000140 R09: 000000000000001c [ 559.157866][T12917] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 559.157877][T12917] R13: 00007fd274a26038 R14: 00007fd274a25fa0 R15: 00007fd274b4fa48 [ 559.157901][T12917] [ 559.199679][ T8445] usb 5-1: device descriptor read/64, error -71 [ 559.547282][ T8445] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 559.696950][ T8445] usb 5-1: device descriptor read/64, error -71 [ 559.807385][ T8445] usb usb5-port1: attempt power cycle [ 560.133586][T12931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.135150][T12931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.156427][ T8445] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 560.187489][ T8445] usb 5-1: device descriptor read/8, error -71 [ 560.346642][ T91] net_ratelimit: 35 callbacks suppressed [ 560.353763][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 560.438711][ T8444] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 560.447708][ T8445] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 560.469399][ T8445] usb 5-1: device descriptor read/8, error -71 [ 560.528590][ T8915] bond1: (slave bridge1): failed to get link speed/duplex [ 560.588966][ T8444] usb 3-1: device descriptor read/64, error -71 [ 560.596090][ T8445] usb usb5-port1: unable to enumerate USB device [ 560.647564][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 560.757049][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 560.836645][ T8444] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 560.867182][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 560.967104][ T8444] usb 3-1: device descriptor read/64, error -71 [ 560.976852][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 561.076908][ T8444] usb usb3-port1: attempt power cycle [ 561.086830][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 561.196948][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 561.306749][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 561.417037][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 561.424909][ T8444] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 561.459123][ T8444] usb 3-1: device descriptor read/8, error -71 [ 561.696897][ T8444] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 561.718348][ T8444] usb 3-1: device descriptor read/8, error -71 [ 561.826968][ T8444] usb usb3-port1: unable to enumerate USB device [ 561.993718][T12960] FAULT_INJECTION: forcing a failure. [ 561.993718][T12960] name failslab, interval 1, probability 0, space 0, times 0 [ 561.993780][T12960] CPU: 1 UID: 0 PID: 12960 Comm: syz.4.1881 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.993813][T12960] Tainted: [L]=SOFTLOCKUP [ 561.993822][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.993837][T12960] Call Trace: [ 561.993847][T12960] [ 561.993857][T12960] dump_stack_lvl+0xe8/0x150 [ 561.993896][T12960] should_fail_ex+0x410/0x560 [ 561.993936][T12960] should_failslab+0xa8/0x100 [ 561.993964][T12960] ? skb_clone+0x212/0x3a0 [ 561.993991][T12960] kmem_cache_alloc_noprof+0xa1/0x600 [ 561.994028][T12960] ? skb_clone+0x212/0x3a0 [ 561.994061][T12960] skb_clone+0x212/0x3a0 [ 561.994100][T12960] __netlink_deliver_tap+0x413/0x860 [ 561.994142][T12960] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.994173][T12960] netlink_deliver_tap+0x19c/0x1b0 [ 561.994205][T12960] netlink_sendskb+0x68/0x140 [ 561.994233][T12960] nfnetlink_rcv+0x260c/0x28c0 [ 561.994296][T12960] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 561.994340][T12960] ? ref_tracker_free+0x689/0x830 [ 561.994390][T12960] ? skb_clone+0x246/0x3a0 [ 561.994420][T12960] ? __netlink_deliver_tap+0x811/0x860 [ 561.994458][T12960] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.994487][T12960] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.994521][T12960] netlink_unicast+0x7bd/0x940 [ 561.994559][T12960] netlink_sendmsg+0x813/0xb40 [ 561.994599][T12960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.994638][T12960] ? apparmor_socket_sendmsg+0x98/0x360 [ 561.994676][T12960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.994705][T12960] sock_sendmsg_nosec+0x13a/0x180 [ 561.994740][T12960] ____sys_sendmsg+0x54e/0x850 [ 561.994771][T12960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.994808][T12960] ? import_iovec+0x73/0xa0 [ 561.994837][T12960] ___sys_sendmsg+0x2a5/0x360 [ 561.994862][T12960] ? __lock_acquire+0x6df/0x2e50 [ 561.994894][T12960] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.994958][T12960] ? __fget_files+0x2a/0x420 [ 561.994988][T12960] ? __fget_files+0x3a2/0x420 [ 561.995029][T12960] __x64_sys_sendmsg+0x1b1/0x290 [ 561.995058][T12960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.995113][T12960] do_syscall_64+0x166/0x520 [ 561.995148][T12960] ? trace_irq_disable+0x3b/0x140 [ 561.995171][T12960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.995194][T12960] ? clear_bhb_loop+0x70/0xc0 [ 561.995222][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.995247][T12960] RIP: 0033:0x7fec1fb9e159 [ 561.995268][T12960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.995288][T12960] RSP: 002b:00007fec209a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.995313][T12960] RAX: ffffffffffffffda RBX: 00007fec1fe25fa0 RCX: 00007fec1fb9e159 [ 561.995332][T12960] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 561.995347][T12960] RBP: 00007fec209a1090 R08: 0000000000000000 R09: 0000000000000000 [ 561.995362][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 561.995377][T12960] R13: 00007fec1fe26038 R14: 00007fec1fe25fa0 R15: 00007fec1ff4fa48 [ 561.995413][T12960] [ 562.617775][ T8459] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 562.773429][ T8459] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 562.802454][ T8459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.802509][ T8459] usb 5-1: Product: syz [ 562.802528][ T8459] usb 5-1: Manufacturer: syz [ 562.802544][ T8459] usb 5-1: SerialNumber: syz [ 562.845340][ T8459] usb 5-1: config 0 descriptor?? [ 562.865267][ T8459] hub 5-1:0.0: bad descriptor, ignoring hub [ 562.865330][ T8459] hub 5-1:0.0: probe with driver hub failed with error -5 [ 562.891205][ T8459] f81232 5-1:0.0: f81534a converter detected [ 563.074575][ T8459] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 563.074633][ T8459] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 563.155460][ T8459] usb 5-1: USB disconnect, device number 122 [ 563.173855][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.173936][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.293848][ T8459] f81232 5-1:0.0: device disconnected [ 563.363994][T12988] fuse: Unknown parameter 'Žd' [ 563.397568][ T8444] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 563.405518][ T8444] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 563.416261][ T8444] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 563.429761][ T8444] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 563.429828][ T8444] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 563.429861][ T8444] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 563.429899][ T8444] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 563.429931][ T8444] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 563.429963][ T8444] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 563.429995][ T8444] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 563.521675][ T8444] hid-generic 0000:0000:0004.0018: hidraw0: HID v0.03 Device [syz1] on syz0 [ 563.586679][ T8439] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 563.620778][T12992] fido_id[12992]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 563.760581][ T8439] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.788178][ T8439] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.788235][ T8439] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.788328][ T8439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.033880][T12999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.056824][T13001] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 564.067817][ T8439] usb 2-1: usb_control_msg returned -32 [ 564.067886][ T8439] usbtmc 2-1:16.0: can't read capabilities [ 564.134938][T13002] Invalid argument reading file caps for ./file0 [ 564.239715][T13006] FAULT_INJECTION: forcing a failure. [ 564.239715][T13006] name failslab, interval 1, probability 0, space 0, times 0 [ 564.253332][T13006] CPU: 1 UID: 0 PID: 13006 Comm: syz.3.1895 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.253369][T13006] Tainted: [L]=SOFTLOCKUP [ 564.253379][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.253393][T13006] Call Trace: [ 564.253402][T13006] [ 564.253412][T13006] dump_stack_lvl+0xe8/0x150 [ 564.253451][T13006] should_fail_ex+0x410/0x560 [ 564.253490][T13006] ? __alloc_skb+0x1db/0x7a0 [ 564.253512][T13006] should_failslab+0xa8/0x100 [ 564.253541][T13006] ? __alloc_skb+0x1db/0x7a0 [ 564.253560][T13006] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 564.253595][T13006] ? __alloc_skb+0x18d/0x7a0 [ 564.253617][T13006] ? __alloc_skb+0x1db/0x7a0 [ 564.253655][T13006] __alloc_skb+0x1db/0x7a0 [ 564.253682][T13006] netlink_ack+0x136/0xb30 [ 564.253709][T13006] ? kasan_quarantine_put+0xbb/0x1f0 [ 564.253744][T13006] ? lockdep_hardirqs_on+0x7b/0x110 [ 564.253792][T13006] nfnetlink_rcv+0x260c/0x28c0 [ 564.253854][T13006] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 564.253897][T13006] ? ref_tracker_free+0x689/0x830 [ 564.253950][T13006] ? skb_clone+0x246/0x3a0 [ 564.253981][T13006] ? __netlink_deliver_tap+0x811/0x860 [ 564.254019][T13006] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.254047][T13006] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.254081][T13006] netlink_unicast+0x7bd/0x940 [ 564.254120][T13006] netlink_sendmsg+0x813/0xb40 [ 564.254160][T13006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.254197][T13006] ? apparmor_socket_sendmsg+0x98/0x360 [ 564.254236][T13006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.254265][T13006] sock_sendmsg_nosec+0x13a/0x180 [ 564.254307][T13006] ____sys_sendmsg+0x54e/0x850 [ 564.254339][T13006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.254375][T13006] ? import_iovec+0x73/0xa0 [ 564.254404][T13006] ___sys_sendmsg+0x2a5/0x360 [ 564.254429][T13006] ? __lock_acquire+0x6df/0x2e50 [ 564.254456][T13006] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.254519][T13006] ? __fget_files+0x2a/0x420 [ 564.254548][T13006] ? __fget_files+0x3a2/0x420 [ 564.254589][T13006] __x64_sys_sendmsg+0x1b1/0x290 [ 564.254618][T13006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.254666][T13006] do_syscall_64+0x166/0x520 [ 564.254700][T13006] ? trace_irq_disable+0x3b/0x140 [ 564.254723][T13006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.254746][T13006] ? clear_bhb_loop+0x70/0xc0 [ 564.254773][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.254797][T13006] RIP: 0033:0x7fb824d9e159 [ 564.254821][T13006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.254841][T13006] RSP: 002b:00007fb825c46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.254867][T13006] RAX: ffffffffffffffda RBX: 00007fb825025fa0 RCX: 00007fb824d9e159 [ 564.254884][T13006] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 564.254900][T13006] RBP: 00007fb825c46090 R08: 0000000000000000 R09: 0000000000000000 [ 564.254915][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.254930][T13006] R13: 00007fb825026038 R14: 00007fb825025fa0 R15: 00007fb82514fa48 [ 564.254964][T13006] [ 565.356716][ T8439] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 565.432697][ T12] net_ratelimit: 31 callbacks suppressed [ 565.432771][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 565.469654][T13028] FAULT_INJECTION: forcing a failure. [ 565.469654][T13028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.484433][T13028] CPU: 1 UID: 0 PID: 13028 Comm: syz.2.1902 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.484472][T13028] Tainted: [L]=SOFTLOCKUP [ 565.484482][T13028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.484497][T13028] Call Trace: [ 565.484506][T13028] [ 565.484516][T13028] dump_stack_lvl+0xe8/0x150 [ 565.484553][T13028] should_fail_ex+0x410/0x560 [ 565.484592][T13028] _copy_from_user+0x2d/0xb0 [ 565.484618][T13028] __sys_connect+0x155/0x450 [ 565.484642][T13028] ? __pfx___sys_connect+0x10/0x10 [ 565.484676][T13028] ? __pfx_ksys_write+0x10/0x10 [ 565.484713][T13028] __x64_sys_connect+0x7a/0x90 [ 565.484735][T13028] do_syscall_64+0x166/0x520 [ 565.484771][T13028] ? trace_irq_disable+0x3b/0x140 [ 565.484793][T13028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.484818][T13028] ? clear_bhb_loop+0x70/0xc0 [ 565.484846][T13028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.484869][T13028] RIP: 0033:0x7f6b3919e159 [ 565.484892][T13028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.484913][T13028] RSP: 002b:00007f6b3a04d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 565.484938][T13028] RAX: ffffffffffffffda RBX: 00007f6b39425fa0 RCX: 00007f6b3919e159 [ 565.484955][T13028] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 565.484971][T13028] RBP: 00007f6b3a04d090 R08: 0000000000000000 R09: 0000000000000000 [ 565.484986][T13028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.485000][T13028] R13: 00007f6b39426038 R14: 00007f6b39425fa0 R15: 00007f6b3954fa48 [ 565.485035][T13028] [ 565.537134][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 565.549671][ T8439] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 565.583093][ T8439] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.583150][ T8439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.650752][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 565.756746][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 565.853567][T13030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.855825][T13030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.867192][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 565.976884][ T8912] bond1: (slave bridge1): failed to get link speed/duplex [ 566.086725][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 566.139647][ T8439] wacom 0003:056A:033B.0019: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 566.157070][ T8439] wacom 0003:056A:033B.0019: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 566.177262][ T8439] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0019/input/input51 [ 566.197431][ T91] bond1: (slave bridge1): failed to get link speed/duplex [ 566.306652][ T8915] bond1: (slave bridge1): failed to get link speed/duplex [ 566.385269][ T8459] usb 5-1: USB disconnect, device number 123 [ 566.410014][ T10] usb 2-1: USB disconnect, device number 7 [ 566.431735][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 566.481701][T13040] FAULT_INJECTION: forcing a failure. [ 566.481701][T13040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.497317][T13040] CPU: 1 UID: 0 PID: 13040 Comm: syz.1.1905 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.497354][T13040] Tainted: [L]=SOFTLOCKUP [ 566.497363][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.497377][T13040] Call Trace: [ 566.497386][T13040] [ 566.497397][T13040] dump_stack_lvl+0xe8/0x150 [ 566.497433][T13040] should_fail_ex+0x410/0x560 [ 566.497473][T13040] _copy_to_user+0x31/0xb0 [ 566.497501][T13040] simple_read_from_buffer+0xe1/0x170 [ 566.497548][T13040] proc_fail_nth_read+0x1bb/0x230 [ 566.497581][T13040] ? common_file_perm+0x20e/0x2b0 [ 566.497607][T13040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 566.497645][T13040] ? rw_verify_area+0x24a/0x4c0 [ 566.497678][T13040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 566.497713][T13040] vfs_read+0x213/0xa80 [ 566.497746][T13040] ? __pfx___mutex_lock+0x10/0x10 [ 566.497768][T13040] ? __pfx_vfs_read+0x10/0x10 [ 566.497802][T13040] ? __fget_files+0x2a/0x420 [ 566.497836][T13040] ? __fget_files+0x3a2/0x420 [ 566.497864][T13040] ? __fget_files+0x2a/0x420 [ 566.497902][T13040] ksys_read+0x150/0x270 [ 566.497936][T13040] ? __pfx_ksys_read+0x10/0x10 [ 566.497980][T13040] do_syscall_64+0x166/0x520 [ 566.498013][T13040] ? trace_irq_disable+0x3b/0x140 [ 566.498038][T13040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.498060][T13040] ? clear_bhb_loop+0x70/0xc0 [ 566.498088][T13040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.498110][T13040] RIP: 0033:0x7fd27475e98e [ 566.498132][T13040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 566.498175][T13040] RSP: 002b:00007fd2756a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 566.498199][T13040] RAX: ffffffffffffffda RBX: 00007fd2756a96c0 RCX: 00007fd27475e98e [ 566.498216][T13040] RDX: 000000000000000f RSI: 00007fd2756a90a0 RDI: 0000000000000005 [ 566.498231][T13040] RBP: 00007fd2756a9090 R08: 0000000000000000 R09: 0000000000000000 [ 566.498245][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.498259][T13040] R13: 00007fd274a26038 R14: 00007fd274a25fa0 R15: 00007fd274b4fa48 [ 566.498294][T13040] [ 566.941767][T13042] syzkaller1: entered promiscuous mode [ 566.941815][T13042] syzkaller1: entered allmulticast mode [ 567.050459][T13052] FAULT_INJECTION: forcing a failure. [ 567.050459][T13052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.063923][T13052] CPU: 1 UID: 0 PID: 13052 Comm: syz.0.1911 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.063960][T13052] Tainted: [L]=SOFTLOCKUP [ 567.063969][T13052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.063984][T13052] Call Trace: [ 567.063993][T13052] [ 567.064003][T13052] dump_stack_lvl+0xe8/0x150 [ 567.064041][T13052] should_fail_ex+0x410/0x560 [ 567.064080][T13052] _copy_from_user+0x2d/0xb0 [ 567.064106][T13052] ___sys_sendmsg+0x1c6/0x360 [ 567.064131][T13052] ? __lock_acquire+0x6df/0x2e50 [ 567.064158][T13052] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.064219][T13052] ? __fget_files+0x2a/0x420 [ 567.064248][T13052] ? __fget_files+0x3a2/0x420 [ 567.064288][T13052] __x64_sys_sendmsg+0x1b1/0x290 [ 567.064316][T13052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.064365][T13052] do_syscall_64+0x166/0x520 [ 567.064398][T13052] ? trace_irq_disable+0x3b/0x140 [ 567.064421][T13052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.064444][T13052] ? clear_bhb_loop+0x70/0xc0 [ 567.064472][T13052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.064495][T13052] RIP: 0033:0x7fe1c959e159 [ 567.064517][T13052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.064545][T13052] RSP: 002b:00007fe1ca489028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.064570][T13052] RAX: ffffffffffffffda RBX: 00007fe1c9825fa0 RCX: 00007fe1c959e159 [ 567.064586][T13052] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 567.064601][T13052] RBP: 00007fe1ca489090 R08: 0000000000000000 R09: 0000000000000000 [ 567.064615][T13052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.064629][T13052] R13: 00007fe1c9826038 R14: 00007fe1c9825fa0 R15: 00007fe1c994fa48 [ 567.064663][T13052] [ 567.232903][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 567.369710][T13059] FAULT_INJECTION: forcing a failure. [ 567.369710][T13059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.383269][T13059] CPU: 1 UID: 0 PID: 13059 Comm: syz.0.1914 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.383304][T13059] Tainted: [L]=SOFTLOCKUP [ 567.383313][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.383327][T13059] Call Trace: [ 567.383337][T13059] [ 567.383347][T13059] dump_stack_lvl+0xe8/0x150 [ 567.383384][T13059] should_fail_ex+0x410/0x560 [ 567.383423][T13059] _copy_to_user+0x31/0xb0 [ 567.383450][T13059] simple_read_from_buffer+0xe1/0x170 [ 567.383495][T13059] proc_fail_nth_read+0x1bb/0x230 [ 567.383527][T13059] ? common_file_perm+0x20e/0x2b0 [ 567.383553][T13059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 567.383589][T13059] ? rw_verify_area+0x24a/0x4c0 [ 567.383618][T13059] ? release_sock+0x2f/0x260 [ 567.383652][T13059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 567.383684][T13059] vfs_read+0x213/0xa80 [ 567.383720][T13059] ? __pfx___mutex_lock+0x10/0x10 [ 567.383742][T13059] ? __pfx_vfs_read+0x10/0x10 [ 567.383775][T13059] ? __fget_files+0x2a/0x420 [ 567.383807][T13059] ? __fget_files+0x3a2/0x420 [ 567.383834][T13059] ? __fget_files+0x2a/0x420 [ 567.383870][T13059] ksys_read+0x150/0x270 [ 567.383904][T13059] ? __pfx_ksys_read+0x10/0x10 [ 567.383946][T13059] do_syscall_64+0x166/0x520 [ 567.383978][T13059] ? trace_irq_disable+0x3b/0x140 [ 567.384001][T13059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.384025][T13059] ? clear_bhb_loop+0x70/0xc0 [ 567.384054][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.384078][T13059] RIP: 0033:0x7fe1c955e98e [ 567.384101][T13059] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 567.384121][T13059] RSP: 002b:00007fe1ca488fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 567.384146][T13059] RAX: ffffffffffffffda RBX: 00007fe1ca4896c0 RCX: 00007fe1c955e98e [ 567.384163][T13059] RDX: 000000000000000f RSI: 00007fe1ca4890a0 RDI: 0000000000000005 [ 567.384178][T13059] RBP: 00007fe1ca489090 R08: 0000000000000000 R09: 0000000000000000 [ 567.384193][T13059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.384207][T13059] R13: 00007fe1c9826038 R14: 00007fe1c9825fa0 R15: 00007fe1c994fa48 [ 567.384243][T13059] [ 567.391763][ T10] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 567.469483][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.469557][ T10] usb 2-1: Product: syz [ 567.469607][ T10] usb 2-1: Manufacturer: syz [ 567.469649][ T10] usb 2-1: SerialNumber: syz [ 567.603876][ T10] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 567.717271][ T10] scsi host1: usb-storage 2-1:1.0 [ 568.118612][ T8459] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 568.252954][T13087] binder: 13083:13087 unknown command 0 [ 568.253001][T13087] binder: 13083:13087 ioctl c0306201 200000000180 returned -22 [ 568.272171][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 568.272236][T13084] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1921'. [ 568.299478][ T8459] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 568.315857][ T8459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.334434][ T8459] usb 3-1: config 0 descriptor?? [ 568.772740][ T8457] ------------[ cut here ]------------ [ 568.772775][ T8457] URB ffff888077558000 submitted while active [ 568.772823][ T8457] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:14/8457 [ 568.795294][ T8457] Modules linked in: [ 568.799458][ T8457] CPU: 0 UID: 0 PID: 8457 Comm: kworker/0:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.810670][ T8457] Tainted: [L]=SOFTLOCKUP [ 568.815092][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.825301][ T8457] Workqueue: events_freezable usb_stor_scan_dwork [ 568.832914][ T8457] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 568.840260][ T8457] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 89 c1 c9 fa 49 83 3e 00 74 40 e8 ce e9 59 fa 48 8d 3d d7 f8 19 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 e9 59 fa eb 05 e8 ac e9 [ 568.860055][ T8457] RSP: 0018:ffffc9001b6a7878 EFLAGS: 00010293 [ 568.866220][ T8457] RAX: ffffffff876dd152 RBX: ffff888077558000 RCX: ffff888030feddc0 [ 568.874429][ T8457] RDX: 0000000000000000 RSI: ffff888077558000 RDI: ffffffff9087ca30 [ 568.882833][ T8457] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 568.891094][ T8457] R10: ffffc9001b6a7960 R11: fffff520036d4f37 R12: ffff888077558068 [ 568.899223][ T8457] R13: ffff888078d210a0 R14: ffff888077558008 R15: 0000000000000c00 [ 568.907348][ T8457] FS: 0000000000000000(0000) GS:ffff888124cd8000(0000) knlGS:0000000000000000 [ 568.916388][ T8457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.923134][ T8457] CR2: 00007fee7246a6b0 CR3: 0000000032158000 CR4: 00000000003526f0 [ 568.931767][ T8457] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 568.939986][ T8457] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 568.948100][ T8457] Call Trace: [ 568.951460][ T8457] [ 568.954468][ T8457] ? __raw_spin_lock_init+0x45/0x100 [ 568.959939][ T8457] ? __init_swait_queue_head+0xa8/0x150 [ 568.965589][ T8457] usb_stor_msg_common+0x2a2/0x500 [ 568.970870][ T8457] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 568.976656][ T8457] usb_stor_Bulk_max_lun+0x2fd/0x5b0 [ 568.982063][ T8457] usb_stor_scan_dwork+0xf4/0x2c0 [ 568.987259][ T8457] ? process_scheduled_works+0x97a/0x1630 [ 568.993080][ T8457] process_scheduled_works+0xc3d/0x1630 [ 568.998810][ T8457] ? __pfx_process_scheduled_works+0x10/0x10 [ 569.004898][ T8457] ? assign_work+0x3cf/0x5d0 [ 569.009747][ T8457] worker_thread+0xa47/0xfb0 [ 569.014518][ T8457] kthread+0x38b/0x480 [ 569.018776][ T8457] ? __pfx_worker_thread+0x10/0x10 [ 569.023991][ T8457] ? __pfx_kthread+0x10/0x10 [ 569.028734][ T8457] ret_from_fork+0x514/0xb70 [ 569.033444][ T8457] ? __pfx_ret_from_fork+0x10/0x10 [ 569.038747][ T8457] ? __switch_to+0xc89/0x1420 [ 569.043533][ T8457] ? __pfx_kthread+0x10/0x10 [ 569.048285][ T8457] ret_from_fork_asm+0x1a/0x30 [ 569.053175][ T8457] [ 569.056357][ T8457] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 569.063697][ T8457] CPU: 0 UID: 0 PID: 8457 Comm: kworker/0:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.074767][ T8457] Tainted: [L]=SOFTLOCKUP [ 569.079129][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 569.089417][ T8457] Workqueue: events_freezable usb_stor_scan_dwork [ 569.095905][ T8457] Call Trace: [ 569.099235][ T8457] [ 569.102217][ T8457] vpanic+0x56d/0xa60 [ 569.106344][ T8457] ? __pfx__printk+0x10/0x10 [ 569.110983][ T8457] ? __pfx_vpanic+0x10/0x10 [ 569.115527][ T8457] ? is_bpf_text_address+0x292/0x2b0 [ 569.120901][ T8457] ? is_bpf_text_address+0x26/0x2b0 [ 569.126194][ T8457] panic+0xc5/0xd0 [ 569.129974][ T8457] ? __pfx_panic+0x10/0x10 [ 569.134466][ T8457] ? ret_from_fork_asm+0x1a/0x30 [ 569.139463][ T8457] __warn+0x315/0x4c0 [ 569.143488][ T8457] ? usb_submit_urb+0x79/0x18b0 [ 569.148397][ T8457] ? usb_submit_urb+0x79/0x18b0 [ 569.153416][ T8457] __report_bug+0x276/0x570 [ 569.157980][ T8457] ? usb_submit_urb+0x79/0x18b0 [ 569.162883][ T8457] ? __pfx___report_bug+0x10/0x10 [ 569.167977][ T8457] ? usb_submit_urb+0x81/0x18b0 [ 569.172878][ T8457] ? usb_submit_urb+0x7c/0x18b0 [ 569.177781][ T8457] report_bug_entry+0x19b/0x290 [ 569.182672][ T8457] ? usb_submit_urb+0x7c/0x18b0 [ 569.187554][ T8457] ? usb_submit_urb+0x81/0x18b0 [ 569.192427][ T8457] handle_bug+0xce/0x200 [ 569.196698][ T8457] exc_invalid_op+0x1a/0x50 [ 569.201227][ T8457] asm_exc_invalid_op+0x1a/0x20 [ 569.206105][ T8457] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 569.211597][ T8457] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 89 c1 c9 fa 49 83 3e 00 74 40 e8 ce e9 59 fa 48 8d 3d d7 f8 19 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 e9 59 fa eb 05 e8 ac e9 [ 569.231834][ T8457] RSP: 0018:ffffc9001b6a7878 EFLAGS: 00010293 [ 569.237926][ T8457] RAX: ffffffff876dd152 RBX: ffff888077558000 RCX: ffff888030feddc0 [ 569.245947][ T8457] RDX: 0000000000000000 RSI: ffff888077558000 RDI: ffffffff9087ca30 [ 569.253935][ T8457] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 569.261926][ T8457] R10: ffffc9001b6a7960 R11: fffff520036d4f37 R12: ffff888077558068 [ 569.269922][ T8457] R13: ffff888078d210a0 R14: ffff888077558008 R15: 0000000000000c00 [ 569.277915][ T8457] ? usb_submit_urb+0x72/0x18b0 [ 569.282806][ T8457] ? usb_submit_urb+0x72/0x18b0 [ 569.287682][ T8457] ? __raw_spin_lock_init+0x45/0x100 [ 569.293097][ T8457] ? __init_swait_queue_head+0xa8/0x150 [ 569.298670][ T8457] usb_stor_msg_common+0x2a2/0x500 [ 569.303813][ T8457] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 569.309493][ T8457] usb_stor_Bulk_max_lun+0x2fd/0x5b0 [ 569.314826][ T8457] usb_stor_scan_dwork+0xf4/0x2c0 [ 569.319980][ T8457] ? process_scheduled_works+0x97a/0x1630 [ 569.325726][ T8457] process_scheduled_works+0xc3d/0x1630 [ 569.331340][ T8457] ? __pfx_process_scheduled_works+0x10/0x10 [ 569.337400][ T8457] ? assign_work+0x3cf/0x5d0 [ 569.342028][ T8457] worker_thread+0xa47/0xfb0 [ 569.346671][ T8457] kthread+0x38b/0x480 [ 569.350766][ T8457] ? __pfx_worker_thread+0x10/0x10 [ 569.355904][ T8457] ? __pfx_kthread+0x10/0x10 [ 569.360518][ T8457] ret_from_fork+0x514/0xb70 [ 569.365139][ T8457] ? __pfx_ret_from_fork+0x10/0x10 [ 569.370294][ T8457] ? __switch_to+0xc89/0x1420 [ 569.375004][ T8457] ? __pfx_kthread+0x10/0x10 [ 569.379617][ T8457] ret_from_fork_asm+0x1a/0x30 [ 569.384423][ T8457] [ 569.388091][ T8457] Kernel Offset: disabled [ 569.392433][ T8457] Rebooting in 86400 seconds..