last executing test programs: 2m42.567195776s ago: executing program 0 (id=3959): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xa) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) (fail_nth: 12) 2m42.43620209s ago: executing program 0 (id=3960): r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x2000, 0x0) r1 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x200, 0x0, 0x42, 0x0, r0}, 0x0, &(0x7f0000011000), &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x16, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc0100000400000000000000000000000000000004"], 0xfc}}, 0x0) (fail_nth: 11) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2m41.505134495s ago: executing program 0 (id=3967): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000240), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xfbfbfbfb}) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) 2m39.706174613s ago: executing program 0 (id=3972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e00010069703641e8901461700000002c000280b7540543caa50000ffffffffffff1df3012b266dfffe14000600fe88000000000000000044475b47413f5ccbb81b38fce00895711ab2eb90e6efe850f8fd655311c54e03b77e24bd5d6143dd183099c0a711e8b73689b0bc89e5d56161cd01cdbc549d884495811063ca06eb7ece31240a8f14e9004c0b17ac956b3aefc095e80523daa9bb662b8430416b9048686358d19ab847eab43a546677"], 0x60}, 0x1, 0x0, 0x0, 0x4048875}, 0x0) 2m39.490996436s ago: executing program 0 (id=3975): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x2000, 0x0) r2 = syz_io_uring_setup(0x802d64, &(0x7f0000000100)={0x0, 0x100577, 0x200, 0x0, 0x42, 0x0, r1}, 0x0, &(0x7f0000011000), &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3e6c4be5eb3c89a, 0x300) setsockopt$packet_int(r3, 0x107, 0x16, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000000c0)={0x28, 0x6, r6, r6, 0x1, 0x764859c7, 0xd}) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xe79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86g\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf17\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\tA\xed\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x00', 0x42, 0x4c, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m39.199891269s ago: executing program 0 (id=3978): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbd25, 0x1, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x140c, 0x204, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040000) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x2, 0x1}, 0x18, 0x0) r3 = memfd_create(&(0x7f0000000540)='\xef\x15\xe9F\x91N<\xd6\boSaW\x00', 0x5) lseek(r3, 0x8000000000000006, 0x3) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0xe020, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x5) landlock_restrict_self(r2, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000500)={&(0x7f00000004c0)=[{0x6, 0x1, 0x2, &(0x7f00000002c0)="0b95"}, {0x8, 0x8c11, 0x6e, &(0x7f00000003c0)="4e5df62769361a2f0215612ae84582735f6c6bd7836a43f1e80052072c1345754d2679060e701d334b7b877572c005271f32aa42f4b74006f8572faaefa4c27a18b5f35982b9586c4ff439dc24e783ca04105720abfd5d3ecd55c5fc0d0cac8dcdee36de0d99d029e338d2f692b3"}], 0x2}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00') syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x18800) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600000000000000000000000500ffdc0000002003000000000000001c"], 0x45) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) 2m24.126475189s ago: executing program 32 (id=3978): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbd25, 0x1, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x140c, 0x204, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040000) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x2, 0x1}, 0x18, 0x0) r3 = memfd_create(&(0x7f0000000540)='\xef\x15\xe9F\x91N<\xd6\boSaW\x00', 0x5) lseek(r3, 0x8000000000000006, 0x3) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0xe020, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x5) landlock_restrict_self(r2, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000500)={&(0x7f00000004c0)=[{0x6, 0x1, 0x2, &(0x7f00000002c0)="0b95"}, {0x8, 0x8c11, 0x6e, &(0x7f00000003c0)="4e5df62769361a2f0215612ae84582735f6c6bd7836a43f1e80052072c1345754d2679060e701d334b7b877572c005271f32aa42f4b74006f8572faaefa4c27a18b5f35982b9586c4ff439dc24e783ca04105720abfd5d3ecd55c5fc0d0cac8dcdee36de0d99d029e338d2f692b3"}], 0x2}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00') syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x18800) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600000000000000000000000500ffdc0000002003000000000000001c"], 0x45) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) 7.516306268s ago: executing program 4 (id=4854): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0xf, 0x4, 0x48, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x20, 0x2, 0x7}}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r7, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="685e44543bdaae9a94f4528174d66b879fbab4b3f175b176", 0x18}, {&(0x7f0000000100)="6a10b0eb95602d3d697a249e95bf243cda5d7f4c732bba7f880656ca4e405f5d7ee79d1bc6fc2d038e97bcc9d2d6113616c18132f37b8872ddb1e9afd92766e8caac06e4dd8020", 0x47}], 0x2, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}, {{&(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)="37cbf15cd474287a6edca95fd4ac6e950339e97682c66d61f72a", 0x1a}], 0x1, &(0x7f0000002b80)=ANY=[@ANYBLOB="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"], 0xf8}}, {{&(0x7f0000000580)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f00000005c0)="194c2f8eefb921ebd450e346b8696aa40cab20e50d", 0x15}, {&(0x7f0000000600)="7847791cf0156d5a8b5beac4a69522833724642262eaea3793a89c401ca9c07bd9e3eadc628a27e8cfe5c3761de85da763d2d5cdaafa38c2979b", 0x3a}, {&(0x7f0000000640)="1b716a3be19255e1cf8bfd1bb86426b40c12d141ee53ac15377dc130aabb56d3a14f28f52e3d16321d5ee4f37f1d456a8a6e849c88791b3a78b349572d06ad0b64f208abe229285dee397e3fd1868cd2a60c4e888db3a313f688fa5a544291721b21e4ad7074e5d327868e1472564b9e3200fc8820428ec58e135698feec92e173e630b1c07b3d97b8db524d3c0cc84427ef84e5a61fd15d83a5770e5a03c566207c9c0c3b710d767b90f99d630b79c6576880", 0xb3}, {&(0x7f0000000700)}], 0x4, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}}, {{&(0x7f00000007c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="d846b84abb407b83ea7f25ccad457feb3b80da079d107e3286466a0e3419e8d623ba04c3eea58a6a0e274367f13956b1f669cf4cf8b937491ff28bdef25315362206991ce303b9b3d162a2aca07aba2455ab485a571dc92824ccc905e67564b5720cba9a4894ea3b9320e8173c779ddbc2b545a898516eda3b7dac79dad0265d973905ccf285b6232afbd46101bb6af8b4832db16ad606ebc9a77970a4559ecebe70bb3be3d021a71391ff90ebd42b125b266c57cfe6b8dcd8e5177881af7b62a181b442455da39da27b3b6a", 0xcc}, {&(0x7f0000001900)="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", 0x1000}], 0x3, &(0x7f0000002940)}}, {{&(0x7f0000002980)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002d40), 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="1400000000000000000000000100000001000080000000001c000000000000000000000008000000", @ANYRES32=r11, @ANYBLOB="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"], 0x1b8}}], 0x5, 0x40040) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0xb, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r13 = fcntl$dupfd(r12, 0x0, r10) syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000700)='./file0\x00', 0x800014, &(0x7f00000029c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030302c757365725f69643d000000000000deff00000000", @ANYRESDEC=0x0, @ANYRES64=r7, @ANYRES8=r11, @ANYRES8=r0, @ANYRES32=r10], 0x0, 0x0, &(0x7f0000003180)="018795880df4ce665c95269cf964c5a7e5c3f94c82866c0fff8380078fe72ee0fe94a54fd00295bd55a8ba8412dc6a65e0dfbb34436df953cbaf889bfbb58c3e54bed896751c06e1bad6b5c3db359a4e839f6d7e9d18e7cc7ccdafcf0d50e0cfff13c088a9e3d45ab44369a9164f36") r14 = socket$pppl2tp(0x18, 0x1, 0x1) r15 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r14, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r15, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r16 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1df7a251", @ANYRES16=r16, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000300000008000c00a80a000005001300c70000000500140007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) statx(r6, &(0x7f0000003200)='./file0\x00', 0x400, 0x1, &(0x7f0000000480)) ioctl$SG_SET_DEBUG(r13, 0x227e, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r13, 0x8934, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x40}) 7.112080509s ago: executing program 5 (id=4855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000140), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 6.845128813s ago: executing program 4 (id=4857): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)=@multiplanar_userptr={0x0, 0x4, 0x4, 0xe000, 0x9, {0x0, 0xea60}, {0x1, 0xc, 0x8, 0xd, 0x1, 0xf, "7fbec785"}, 0x8001, 0x2, {0x0}, 0x101}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000580)={0x0, 0x6, 0x2, &(0x7f0000000540)={0x14, "8f58285b9ec3346edfd2105faca25edb6bfaa0885d39734944e7eb93855658d3ed"}}) syz_usb_control_io(r0, 0x0, 0x0) 6.47291697s ago: executing program 5 (id=4860): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0xb) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x100002e) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000006940)="bd5b42b1cdd8978ab9a6d751175588136f1bc7ae56c467f380f0f67d5454ec17c8f3d0e6a97c24e2fc0a63148fcc2e01b340fa770ff4c6bf501d4267ce19ea5522b18bbbcc62a95117e731cfea5eea75c42f3e86283d8372fc886ebcfef5e5cbb42f40808e0e909b967a13b4c3c64db4b04e31fdc2c5edc1f2c63883782c98c5f153c6e655735f5e303b10", 0x8b}, {&(0x7f00000001c0)="4888", 0xffffff96}, {&(0x7f0000000440)="88325d41f049e68258482f5176c31ed01a3259a4d2521ad145d66456f5eb3d0d555d25fdad6ba33fa1dbd0444e2a921d0facce2dbbbda19b66389d09fd1f7689f599faf15ebe76a6f98a1cf9bf2575b81c49683f141da2d1b6ebc5c54cae792f11525f0b257b78c90de0d8c88a88820ad8a0", 0x72}, {&(0x7f0000006a00)="f1034d83c281267f8f9e49bcb3cd708c896972c4f1995d345ac400f2f89c9c5231629ec45883c1cda3cd6c982a2c76242a59e96e5d1cfe753a24a4b2db8ef1ceccc065b89a150cc3960b8e21269cd4a3130f32bb098bb6aa80f3473884e79b816546e78a96f3a1c548bdb3e41bdc583eb6f12b2afe7559f96b2c3f73f5cb520ac717825213ae9b6816e1776ca92256198d86e665de51fcfc0e43de55d10ab821a8cfd3bd194dc517", 0xa8}], 0x4) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1, &(0x7f0000000000)=0x1, 0x4) 6.264621427s ago: executing program 5 (id=4865): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x61b, 0xd027, {{0x9, 0x4, 0x3, 0x2a, 0x24, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0x8c, 0x0, 0x1, [0xb, 0x7]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000002400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30af6feba5a52cd92173797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 6.186555783s ago: executing program 1 (id=4866): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e", 0x44}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b", 0x51}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c", 0x10}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.024852034s ago: executing program 1 (id=4868): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000380), 0x7, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x33c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x808001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xfff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="000000001a00", 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r8 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={r10, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 5.875852253s ago: executing program 3 (id=4870): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="11000000000000000000000001000000000000000000000000090000000900000000000000110000000000000000000000010000009500000000000000600000"], 0xa8}}, {{0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001680)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}}], 0x3, 0xe000) (fail_nth: 1) 5.735065222s ago: executing program 2 (id=4871): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 5.100510859s ago: executing program 2 (id=4872): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x80}}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xfd}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c80)="56beb0a97502a3655bc3b840c164bf64671dba5bafbef10e58be5872a7d886ddb7f43a41e7e45a127cfcf03a4e4ea7fe63617936fff8111c59312e7c2dab74fee689cb23380ad070703f9cb0fcc3cd9968260ba015de767470c95c5f5a4e34ba261cd04b06f672f46bcf3ad20580425362747b4958e5bafd58a1acd921e5e9cb34e71faa34454ff9754f0f0c2fed423b78f43fc2950f6073886b2c4ee4e30d152baf239cc5b3c793a55031d361b01b581bf7cc9c357573d1d95f8bf9bc6d534beda2231331ac8963237753d069087ff8a43364ffb81ab4141b97975d18f6640f5fd5e4a9e6d0380dc605fb209cadb3b289c5a3ff4ab2c85dbe657239fd64c14326ed23735d3043ceebc3af3b530fae69d4b5835393f983352859f82b2e267daab9063b2d6e7b9922c70c779d8a86260b439b084d245ebbb1e832ed8e8805f1cd52f47200a144a2e9de93de47498938e33724378f2d2e5bfc005b99a13f88ff77a8cf1fce27a13f170e8ac030296aaccae5df128a89583f6b817d0a1fca860d710dfad5fa13f17b0f2854fd18a7f41a7ee02067017ddbdf021571d80b95101b09b68ae833843f1e2b5870cd67ae84ffe35ecf837f2bb58c30ca0ad38920e1be77852fafa84ce95d0c8e3382c5f6ea1a6bae659e5778429121e3b6cafc912dee148fe7a63fcba9eafd28c0bda92f603889bead095a6b6654034015c22632bb8e4ed2a97a74ef8b806ac10864f2be7c59f6ff2bd756e27a2cc3b62c132efce918df7f48a01f0b49b4adb52f28ede31879024c2c89f5210f0dbe30af44ef330162680f989cca004fed1dc1cc757ff6daf27b099bbd78870cc828ae3222501a1d128fa1e7cdac92d094b6c0b89c5b06ffec6794632ace8c19b098d667fc6808af4764be2020fa6ee36bbb6772b7586d718471d38631d4f3240ed54056d02bc31bf30107ac449f0b4d4b4f42b122d5cf62a9842fc22bfd12fab48ef4b4d028b5e23e25002f1a89769daaf80004ddd90a623521eb0178088e07e7b5ad3a0da4abe0b54e52ce10d39dc73c0670f2c3f9e9d3696708cea93c4e2b1c7369550fa18d3d766339e14acf0d32f9f95371e923d74d13a9469e45b0ea625c5ac94c01216012c74799223f08036cde4f3a09fc7d377be2bd13e448593abf5dcf454c8c41e44827d9d730d670c65a1dd3c32bcfe09de7b4eb2db398e67dc9acac82340573e4b71e19692d0e1aa8cbdab3eb5d6e7660c986e745253a61a61506bc10b8e3ca8284aaa56dd090994a253c77a44d0587ee2fbb8bffc66d45592a9453ed5500405e5f3fd7654586d218960eec681e9d19b5fcfe2a253f3b71ce664a4babdc53625dceda52534e90539f5212c319b5e5f99362ad240512b9a3e2b5092c760a24a76017d4421cc0fb8bf90a160f09ab52b498c55e966f008000007dca517849fe580a04dd1ff2f1022d7c6d5675e437bcbd268c20d432bc6075859a63c40427fb090595c499d9f6479299476fea8e4c12f80b7a7d76ad377ab74b948ec10605058eaa258f71a4ba23140224bd859002f6bca21cd1e587e18b41d71a5d5de98652019b2b368694a8278772fe336db4e626c4ef3eae1d444084f194d48e91dfff8c6a5f79a90630e54545aa5ac2bbeb38a6c6e2fb86f6d2f6c5b2a857e46c27e93c38895098ca249c916e944647562063d5f71a51da487222bd0edfe0bfbc1f8a6fb837c78ca011f3eccd41631d0a03473759614a356eb57e1d1d6d4feae82a151deda9dbc76b45260c28864d70709e2d639219e589a7c94d94efaf08df5666dad716d08bc76642b359dbdbf9cd0c029b1fcebbb3890ce11def142830fb4b29b55f71a064b220034d46d713309363c8e101056b3ab7b09a51fed69980fd1d259bf0bed8c1c8d045bd0b177f879bfeb4c9feef62138c98404df6723f1f9826db9fa483f918800bc7d1b19974d114b1ced2aa294fafd57c25da5811eace58fdbab50886d6b78647408349875d7224c99adc7cc3e64136bcea783e7f05082a0807787a8a0f0ad45e27a8678c0cc52ba797f6cada1f3d3cc57dbc830f3740f3ca8a26d6b9af396a4476813c66d9b994ab198d00d081beaed1c64c5592e3481f2dc3e711b9de0cefa33e45176743a9c78f362f9d0b1d6567c632b26b65521aa05ec69f6dc1f158bceeed4f1fad86bef4477504f48c13cfb5eca57e242842254578e855fd7c9d9506dd5a72718e663bf314000faff3d34d89b733bdf0298c1c5c096eed88611d407dd37196ddf8e0b09007c9785088833757378a154ab99449d91348b32209f43f337e8a427b72df96947c5e975dca0f1aedb2c728463633d89518d9c9dbafbf1448ae736d6df25959b9e649cdae1301542e337fba3b941ceb332bcea06a27e876b3db770d8c41a4c38dba0afe351ca7e1ef5b3fb3ea3ea66a23142ee9f8660555c4d16ea544f50d6baea7b1b0eac6f85d57af84fa72d13b674b74aaa5f8604a2bc4deb70b92", 0x6e3}], 0x1}}], 0x1, 0x4000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="107d08006c4bb1d957dfb9ff4a2387d6abf3b99ff0753b0e7b1500008003f18152", 0x21) 5.100332169s ago: executing program 3 (id=4873): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000180)={0x40, 0x22, 0xe1, {0xe1, 0xc, "c54875f17443282a281951097c9b8016328a822e5cd5de357404e826bc80f5792c0ff029bebafb3ce1ba6c1d5e6f79d70ebab55392a7d2240a15aa0e48846d202bc45bb21c7a1e035e0bda15d9f06788f0aab2bf289b497f4a26050cfdc2a03bf87c4857c311cb0aad006eccb378256323e37071e32425cd268516af298798590e0870821860bda8898e707500f7c8ff19c2debf7f304208a1f1c204c5190f3c9c6ce404e009afd4f06767835f3fbc6dc1b87c2bb02c79c010bc3010d17d241c0582df760f9511f562436ea44895ede7603287e4b404efdb12277dd4518653"}}, &(0x7f00000004c0)={0x0, 0x3, 0x81, @string={0x81, 0x3, "4f28927288ab5163c3492f3e1c64687c89b6433e0f6736c8303a44d2fa320b3f27be49721c790eec3c488fe7963ee153f685531af7eb72db00dbbcf64c63e02831b490610f102778fbc0336aed9f9fd1bc2c7da13606b23fb311964bd83ce8a9508a1db92e8aadff2be76e07cd9c40e146cc72dfdaefe1bdbaa4ec87fcab73"}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x0, 0x17, 0x66, "dc52f616467c9f13eab4fb7b95b1532cc2a493a628d0f4739115a55eb70da39dcc8ddacf773d16ad03441af4dd0ab51639dffdda380a3813bc0509724574e6d536f7dedef422d2d52d696d0c92bebf8a75d033144025ab3bff720fbbdc7eac6585791a35c036"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000780)={0xc0, 0x5, 0x3, "f926ab"}, &(0x7f00000007c0)={0x40, 0x5, 0x2, 'kx'}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000009"], 0x20) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) syz_usb_control_io$rtl8150(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x40, 0x21, 0xe1, {0xe1, 0x22, "7b9ce25ef3ef19d3f9fd561b7e0ee5eb6f07e2bd36359b20932838f0d041d4ef569e6293d27a3c5d3b94424aeac410e4f7b31935ae40077ee65b26fee2990e4e6447e585206a295a12313450438eb5256ff69af92bf85d593aba1e117edacf6d094a37ecf750f7ee41f7238acc7cb4d141b881cd57d159eb0e8862e778f8254efaf5ff893c23ede3252dcf61273ff74a954074b9dd59f3e44593a6c1ec9e25758189823ac2120634e5afde517f4fa2f0c02d80d59c362085b822e26ee641173866f3d2c01621384275d7bb6df5fc32967dde920c7a72f2b568ebbf5a117edf"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x40, 0x3, 0x7d, "24ae2a8cbfd502377bf0b22c68928609c746a4eb87552cc570cdc795594a6a71fe25cc9737aec0e15d89a262c2eada4a190a3a0b86227339e3b0e03691fd81c8270de5363e868d7ab1a7b3674ec62835c3806c767041c2b955590a22c0cc97d6645e940da672e9fac8723296843a788aed856b07f83915300782f2a70b"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0xcf}, &(0x7f0000000b40), &(0x7f0000000b80)={0x40, 0x5, 0x3, "97856b"}}) 5.075990785s ago: executing program 2 (id=4874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) close(r2) move_mount(0xffffffffffffff9c, 0x0, r2, 0x0, 0x262) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x982}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000001c0)={0x16, 0x1, 0xde}) 4.81086166s ago: executing program 2 (id=4875): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ffffffffc40911003806010203010902240001720610060904f0e802b5f0cb836d6474c2629f5831821c800309050102ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x32, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x32}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="9f", 0x1}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="10000000000000000f010000000000003000000000000000ff00000005000000dae7c65afdd9d1d5073fbf984e560f7f7af0377a701ad4e8ab3a00000000000090000000000000000000000004000000474995282b8d35b2efb349cfa55288ab0139064c723f71e2d9ced0cbb2d46df48f8ee505b82850c69ed841ec12c3b6392c378033c46278ff6bc63d6d5bf4c8b718e78b05ad817aac3b5239cd4fe877aff14721f369a8fb6e6daa5710be61d3edc36edbd248ee581a70263663739cac6a0b0dc55ac9b2f56dc43f04dc78a3000058"], 0x128}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000b40)="a6", 0x1}], 0x1, &(0x7f0000003400)=[{0xc, 0x1, 0xf}], 0xc}}], 0x2, 0x4000045) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x4, 0xe, 0xf1, 0x3, 0xfd, 0xd7, 0xd4, 0x0, 0xd7, 0xf7, 0x47}, {0x0, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0xf, 0x3, 0x45}, {0x8080000, 0xdddd0000, 0xb, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x96, 0xc4, 0x5}, {0xeeee3000, 0x4, 0x4, 0xf8, 0x3, 0x68, 0x9, 0xd, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0x9, 0x2c, 0x4b}, {0x9000, 0xd000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0xfc}, {0xa000, 0xc000, 0xf, 0x82, 0x3, 0xfb, 0x0, 0x5, 0x1, 0x7, 0x43, 0xf9}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0xff, 0xa, 0x1, 0x54, 0x1, 0xff, 0x7}, {0x692daea2027b6777, 0x5}, {0x80a0000, 0x8}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x6, 0xe000, 0xe6e70c00, [0x3, 0x401, 0x8, 0xc5]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0x7a, 0x3, '\x00', 0xb031}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$rfkill(r4, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) 4.337679888s ago: executing program 1 (id=4876): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x800}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x38, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x168, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3b5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9c]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1532}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6fa}]}, @NL80211_ATTR_CQM={0x8c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x2, 0x4f]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7ff, 0x3, 0x8, 0x3, 0x9, 0x8000]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xfffffffd, 0x10, 0x5, 0x100, 0x9, 0x5, 0x49a7, 0x0, 0x22c2, 0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x15d}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffa}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xfffffffd, 0x5, 0xbb, 0x3]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6e13}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffb}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x60048044) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0040000001, 0x892, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xffffffff, 0xf, 0x31363553, 0x7, 0xd, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x5, 0x4}, {0x28, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x1}}, 0x9}) close(r9) 4.216921995s ago: executing program 5 (id=4877): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x6, 0xfb, 0x3, 0x4, 0x9, 0x8, 0x5, 0x1, 0x1, 0x7f, 0x3, 0xf8, 0xf9, 0x7, 0x2, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb737ac7, 0x0, 0x25dfdbfe, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x1d4, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x1ac, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) syz_emit_ethernet(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.737817796s ago: executing program 4 (id=4878): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0x7fffffff, 0x2, 0x6, 0x9}, 0x7, 0x4, 0x0, 0x5, 0x0, 0x3}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e080083"], 0x0}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x5) 3.29194864s ago: executing program 1 (id=4879): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="917093") 2.649769663s ago: executing program 5 (id=4880): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'gre0\x00', {0x6}, 0xa}) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f0000000740)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0x0, 0x3, 0x37, @string={0x37, 0x3, "bf9ee015bf3ed8000aaf4bb70c4fc2b2cdc1aee5fdcdb5e53a79662050d5d1002690068b8b7205c81ea00ace19f07bee805ae5ca8b"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000800)={0x0, 0x18, 0xf3, "88ebdd27f115e1c16769a90c9585b01d0cc425c51b02784ab5c1f35f73c447b6e973aebdcc0a870c1c4ef3b11f85ec95ae83272a0b084b73bfbfc9d2d20394d96dcef9856ab935f655e484bf79873935f396b5dffad673e34952e883ebb59b050c0fa3ad26bb77f55ab45bfc9340980d08e92ab6eddcbdf073c8a7965688dce2730ecf16cb9bb9936bc3ae521d66573e0f6987fdb5625df305f4a165e0cdcfb940cd483fcefc5c7a5fb757bdc4359402cbeb9bb589e7cf35083faa826a0e8b86b6b362d7d486dcedce3a51ced3f0056c2eccd626d7e437e5b368050b0c2b52cf82d7fc42c0e3469a8b61e4d22187b0df5e3325"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xf5}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000980)={0x20, 0x0, 0x26, {0x24, "88e974d3af7f4204dffd82bbe93657e5189c285fdcda1f23de7260016bc174dbb6e71f16"}}, &(0x7f00000009c0)={0x20, 0x1, 0x1, 0xe}, &(0x7f0000000a00)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x50) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, r5, 0x1, 0x70bd68, 0x25dbdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd784}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8404}, 0x8040) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000200)=""/83, 0x53}, {}, {&(0x7f0000000100)=""/22, 0x16}], 0x4}, 0x40012021) 1.976498423s ago: executing program 3 (id=4881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) 1.869929937s ago: executing program 3 (id=4882): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 1.804575008s ago: executing program 4 (id=4883): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0xfffffffe}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r1, r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0xfffffffffffffebe, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.704912012s ago: executing program 3 (id=4884): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x6, 0xfb, 0x3, 0x4, 0x9, 0x8, 0x5, 0x1, 0x1, 0x7f, 0x3, 0xf8, 0xf9, 0x7, 0x2, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x1e00) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb737ac7, 0x0, 0x25dfdbfe, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) syz_emit_ethernet(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 1.673696745s ago: executing program 2 (id=4885): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e", 0x44}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b", 0x51}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c", 0x10}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.47015776s ago: executing program 2 (id=4886): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000380), 0x7, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x33c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x808001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xfff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="000000001a00", 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r8 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={r10, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 1.343302093s ago: executing program 1 (id=4887): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000400005e2559df77751bfc76ab301b6ec7000000004047724fa7dcd208f054d45f84017eb5bb545fff6bd2fc4624605fa9775f541dcc02f962fe4b8181e3c4f8c445fc215ba9ea63d7018ef2c2c3a5dc4f4118c79e5f9cdf01bdd667de860f000000000000005df16ea32177a0b928ba22139aba1ed61edf49", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="00000000000000ee0000000014000000b70300000000000085000000050000bf0900000000000055090100000000009500000000000000bf980000a2864ecfc7af95aa43480300000000000000b50800009e56bafa8677570007efe3000000008500000007000000b70000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) 1.060996396s ago: executing program 1 (id=4888): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)=@multiplanar_userptr={0x0, 0x4, 0x4, 0xe000, 0x9, {0x0, 0xea60}, {0x1, 0xc, 0x8, 0xd, 0x1, 0xf, "7fbec785"}, 0x8001, 0x2, {0x0}, 0x101}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000580)={0x0, 0x6, 0x2, &(0x7f0000000540)={0x14, "8f58285b9ec3346edfd2105faca25edb6bfaa0885d39734944e7eb93855658d3ed"}}) syz_usb_control_io(r0, 0x0, 0x0) 872.971755ms ago: executing program 4 (id=4889): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635", 0x46}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e43", 0x46}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c", 0x10}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 702.433131ms ago: executing program 4 (id=4890): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x4004805) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000480)="dc", 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x40, 0x5, 0x11, "d55fa5f607f009384965e39a0b2de61b5f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000200)) 472.805584ms ago: executing program 5 (id=4891): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000180)={0x40, 0x22, 0xe1, {0xe1, 0xc, "c54875f17443282a281951097c9b8016328a822e5cd5de357404e826bc80f5792c0ff029bebafb3ce1ba6c1d5e6f79d70ebab55392a7d2240a15aa0e48846d202bc45bb21c7a1e035e0bda15d9f06788f0aab2bf289b497f4a26050cfdc2a03bf87c4857c311cb0aad006eccb378256323e37071e32425cd268516af298798590e0870821860bda8898e707500f7c8ff19c2debf7f304208a1f1c204c5190f3c9c6ce404e009afd4f06767835f3fbc6dc1b87c2bb02c79c010bc3010d17d241c0582df760f9511f562436ea44895ede7603287e4b404efdb12277dd4518653"}}, &(0x7f00000004c0)={0x0, 0x3, 0x81, @string={0x81, 0x3, "4f28927288ab5163c3492f3e1c64687c89b6433e0f6736c8303a44d2fa320b3f27be49721c790eec3c488fe7963ee153f685531af7eb72db00dbbcf64c63e02831b490610f102778fbc0336aed9f9fd1bc2c7da13606b23fb311964bd83ce8a9508a1db92e8aadff2be76e07cd9c40e146cc72dfdaefe1bdbaa4ec87fcab73"}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x0, 0x17, 0x66, "dc52f616467c9f13eab4fb7b95b1532cc2a493a628d0f4739115a55eb70da39dcc8ddacf773d16ad03441af4dd0ab51639dffdda380a3813bc0509724574e6d536f7dedef422d2d52d696d0c92bebf8a75d033144025ab3bff720fbbdc7eac6585791a35c036"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000780)={0xc0, 0x5, 0x3, "f926ab"}, &(0x7f00000007c0)={0x40, 0x5, 0x2, 'kx'}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000009"], 0x20) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) syz_usb_control_io$rtl8150(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x40, 0x21, 0xe1, {0xe1, 0x22, "7b9ce25ef3ef19d3f9fd561b7e0ee5eb6f07e2bd36359b20932838f0d041d4ef569e6293d27a3c5d3b94424aeac410e4f7b31935ae40077ee65b26fee2990e4e6447e585206a295a12313450438eb5256ff69af92bf85d593aba1e117edacf6d094a37ecf750f7ee41f7238acc7cb4d141b881cd57d159eb0e8862e778f8254efaf5ff893c23ede3252dcf61273ff74a954074b9dd59f3e44593a6c1ec9e25758189823ac2120634e5afde517f4fa2f0c02d80d59c362085b822e26ee641173866f3d2c01621384275d7bb6df5fc32967dde920c7a72f2b568ebbf5a117edf"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x40, 0x3, 0x7d, "24ae2a8cbfd502377bf0b22c68928609c746a4eb87552cc570cdc795594a6a71fe25cc9737aec0e15d89a262c2eada4a190a3a0b86227339e3b0e03691fd81c8270de5363e868d7ab1a7b3674ec62835c3806c767041c2b955590a22c0cc97d6645e940da672e9fac8723296843a788aed856b07f83915300782f2a70b"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0xcf}, &(0x7f0000000b40), &(0x7f0000000b80)={0x40, 0x5, 0x3, "97856b"}}) 0s ago: executing program 3 (id=4892): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000400005e2559df77751bfc76ab301b6ec7000000004047724fa7dcd208f054d45f84017eb5bb545fff6bd2fc4624605fa9775f541dcc02f962fe4b8181e3c4f8c445fc215ba9ea63d7018ef2c2c3a5dc4f4118c79e5f9cdf01bdd667de860f000000000000005df16ea32177a0b928ba22139aba1ed61edf49", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="00000000000000ee0000000014000000b70300000000000085000000050000bf0900000000000055090100000000009500000000000000bf980000a2864ecfc7af95aa43480300000000000000b50800009e56bafa8677570007efe3000000008500000007000000b70000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) kernel console output (not intermixed with test programs): pter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1442.674320][T22380] usb 3-1: media controller created [ 1442.794042][T22380] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1442.900838][T24965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.919726][T24965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.090497][T22380] DVB: Unable to find symbol tda10046_attach() [ 1443.112018][T22380] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1443.150282][T22380] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1443.170816][T22380] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1443.190927][T24965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.204248][T22380] usb 3-1: USB disconnect, device number 65 [ 1443.242011][T24965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.495489][T18841] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1443.575595][T22380] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1443.675458][T18841] usb 5-1: Using ep0 maxpacket: 32 [ 1443.682481][T18841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.694201][T18841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.705574][ T5697] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1443.714318][T18841] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1443.724050][T18841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.738013][T18841] usb 5-1: config 0 descriptor?? [ 1443.752021][T22380] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.771975][T22380] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1443.782357][T22380] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1443.792165][T22380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.804244][T22380] usb 3-1: Product: syz [ 1443.808804][T22380] usb 3-1: Manufacturer: syz [ 1443.813438][T22380] usb 3-1: SerialNumber: syz [ 1443.827026][T22380] usb 3-1: config 0 descriptor?? [ 1443.844732][T22380] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1443.859207][T22380] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1443.871182][T22380] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1443.880681][T22380] usb 3-1: media controller created [ 1443.886701][ T5697] usb 6-1: Using ep0 maxpacket: 8 [ 1443.898946][ T5697] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1443.915426][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.919321][T22380] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1443.932224][ T5697] usb 6-1: Product: syz [ 1443.951208][ T5697] usb 6-1: Manufacturer: syz [ 1443.963565][ T5697] usb 6-1: SerialNumber: syz [ 1443.983249][ T5697] usb 6-1: config 0 descriptor?? [ 1444.010132][T22380] DVB: Unable to find symbol tda10046_attach() [ 1444.021546][T22380] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1444.030304][T22380] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1444.181596][T18841] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 1444.195507][T18841] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 1444.205663][ T5697] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 1444.222184][ T5697] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1444.247785][ T5697] usb 6-1: USB disconnect, device number 24 [ 1444.376258][T18841] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 1444.583900][T18841] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1444.661888][T24955] loop8: detected capacity change from 0 to 8 [ 1444.676754][T24955] Dev loop8: unable to read RDB block 8 [ 1444.688521][T24955] loop8: unable to read partition table [ 1444.698640][T24955] loop8: partition table beyond EOD, truncated [ 1444.715568][T24955] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1444.757318][T24955] syzkaller1: entered promiscuous mode [ 1444.775673][T24955] syzkaller1: entered allmulticast mode [ 1444.787981][T18841] ft260 0003:0403:6030.0016: failed to retrieve status: -32, no wakeup [ 1444.813903][T18841] ft260 0003:0403:6030.0016: failed to retrieve status: -71 [ 1444.837228][T18841] ft260 0003:0403:6030.0016: failed to reset I2C controller: -71 [ 1444.882126][T18841] usb 5-1: USB disconnect, device number 57 [ 1445.168358][T25012] program syz.5.4488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1445.228267][T24335] usb 2-1: USB disconnect, device number 68 [ 1445.536272][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1445.536288][ T30] audit: type=1326 audit(1777776310.863:33586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25020 comm="syz.4.4492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb99cdd9 code=0x7ffc0000 [ 1445.568584][ T30] audit: type=1326 audit(1777776310.863:33587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25020 comm="syz.4.4492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb99cdd9 code=0x7ffc0000 [ 1445.636665][ T30] audit: type=1326 audit(1777776310.863:33588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25020 comm="syz.4.4492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f24fb99cdd9 code=0x7ffc0000 [ 1445.662123][ T30] audit: type=1326 audit(1777776310.903:33589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25020 comm="syz.4.4492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb99cdd9 code=0x7ffc0000 [ 1445.778855][ T30] audit: type=1326 audit(1777776310.903:33590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25020 comm="syz.4.4492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f24fb99cdd9 code=0x7ffc0000 [ 1445.864358][ T30] audit: type=1326 audit(1777776310.903:33591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25020 comm="syz.4.4492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb99cdd9 code=0x7ffc0000 [ 1445.949758][ T30] audit: type=1326 audit(1777776310.933:33592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25020 comm="syz.4.4492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb99cdd9 code=0x7ffc0000 [ 1446.022618][ T30] audit: type=1326 audit(1777776310.933:33593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25020 comm="syz.4.4492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24fb99cdd9 code=0x7ffc0000 [ 1446.070514][ T30] audit: type=1326 audit(1777776310.933:33594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25020 comm="syz.4.4492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb99cdd9 code=0x7ffc0000 [ 1446.152858][ T30] audit: type=1326 audit(1777776310.933:33595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25020 comm="syz.4.4492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb99cdd9 code=0x7ffc0000 [ 1446.363182][T22380] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1446.434017][T22380] usb 3-1: USB disconnect, device number 66 [ 1447.201394][T25054] program syz.1.4499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1447.475489][ T5697] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1447.646109][ T5697] usb 6-1: Using ep0 maxpacket: 8 [ 1447.678762][ T5697] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1447.714141][ T5697] usb 6-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 1447.729451][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.738776][ T5697] usb 6-1: Product: syz [ 1447.743819][ T5697] usb 6-1: Manufacturer: syz [ 1447.779682][ T5697] usb 6-1: SerialNumber: syz [ 1448.025004][ T5697] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1448.074064][ T5697] usb 6-1: MIDIStreaming interface descriptor not found [ 1448.442420][T25072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4505'. [ 1448.488255][ T5697] usb 6-1: USB disconnect, device number 25 [ 1448.595929][T25077] FAULT_INJECTION: forcing a failure. [ 1448.595929][T25077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.656654][T25077] CPU: 0 UID: 0 PID: 25077 Comm: syz.1.4507 Tainted: G L syzkaller #0 PREEMPT(full) [ 1448.656672][T25077] Tainted: [L]=SOFTLOCKUP [ 1448.656676][T25077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1448.656681][T25077] Call Trace: [ 1448.656686][T25077] [ 1448.656691][T25077] dump_stack_lvl+0xe8/0x150 [ 1448.656708][T25077] should_fail_ex+0x412/0x560 [ 1448.656724][T25077] _copy_to_user+0x31/0xb0 [ 1448.656739][T25077] binder_ioctl_write_read+0x9a5e/0xa590 [ 1448.656850][T25077] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1448.656867][T25077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.656881][T25077] ? kasan_save_track+0x4f/0x80 [ 1448.656894][T25077] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1448.656904][T25077] ? binder_get_thread+0x1c7/0x6d0 [ 1448.656914][T25077] ? binder_ioctl+0x2ad/0x1b10 [ 1448.656956][T25077] ? __se_sys_ioctl+0xfc/0x170 [ 1448.656968][T25077] ? do_syscall_64+0x15f/0xf80 [ 1448.656980][T25077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.656995][T25077] ? __lock_acquire+0x6b5/0x2cf0 [ 1448.657014][T25077] ? binder_debug+0x155/0x1d0 [ 1448.657027][T25077] ? __pfx_binder_debug+0x10/0x10 [ 1448.657037][T25077] ? do_raw_spin_lock+0x12b/0x2f0 [ 1448.657057][T25077] ? _raw_spin_unlock+0x28/0x50 [ 1448.657067][T25077] ? binder_get_thread+0x595/0x6d0 [ 1448.657080][T25077] binder_ioctl+0x423/0x1b10 [ 1448.657092][T25077] ? tomoyo_path_number_perm+0x219/0x630 [ 1448.657104][T25077] ? tomoyo_path_number_perm+0x219/0x630 [ 1448.657116][T25077] ? do_vfs_ioctl+0x1166/0x1530 [ 1448.657129][T25077] ? __pfx_binder_ioctl+0x10/0x10 [ 1448.657140][T25077] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1448.657159][T25077] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1448.657180][T25077] ? __fget_files+0x2a/0x420 [ 1448.657193][T25077] ? __fget_files+0x2a/0x420 [ 1448.657203][T25077] ? __fget_files+0x3a0/0x420 [ 1448.657212][T25077] ? __fget_files+0x2a/0x420 [ 1448.657224][T25077] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1448.657238][T25077] ? __pfx_binder_ioctl+0x10/0x10 [ 1448.657249][T25077] __se_sys_ioctl+0xfc/0x170 [ 1448.657262][T25077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.657279][T25077] do_syscall_64+0x15f/0xf80 [ 1448.657290][T25077] ? trace_irq_disable+0x3b/0x140 [ 1448.657309][T25077] ? clear_bhb_loop+0x40/0x90 [ 1448.657321][T25077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.657330][T25077] RIP: 0033:0x7f2ec5b9cdd9 [ 1448.657340][T25077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.657349][T25077] RSP: 002b:00007f2ec3df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.657361][T25077] RAX: ffffffffffffffda RBX: 00007f2ec5e15fa0 RCX: 00007f2ec5b9cdd9 [ 1448.657368][T25077] RDX: 0000200000000040 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1448.657374][T25077] RBP: 00007f2ec3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.657379][T25077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.657385][T25077] R13: 00007f2ec5e16038 R14: 00007f2ec5e15fa0 R15: 00007f2ec5f3fa48 [ 1448.657399][T25077] [ 1448.657404][T25077] binder: 25076:25077 ioctl c0306201 200000000040 returned -14 [ 1448.993264][T25079] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4508'. [ 1449.068905][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1449.466183][ T5697] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 1449.555675][T22380] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1449.647177][ T5697] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.657867][ T5697] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1449.698908][ T5697] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 1449.718044][T22380] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1449.735484][T24335] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1449.758948][ T5697] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1449.777140][T22380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1449.779262][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.820457][ T5697] hub 6-1:1.0: bad descriptor, ignoring hub [ 1449.829581][ T5697] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1449.838637][ T5697] cdc_wdm 6-1:1.0: skipping garbage [ 1449.845325][ T5697] cdc_wdm 6-1:1.0: skipping garbage [ 1449.869844][ T5697] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1449.875149][T22380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1449.950572][T22380] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1449.990313][T24335] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1450.003080][T22380] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1450.039503][T22380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.039523][T24335] usb 3-1: config 1 has no interface number 0 [ 1450.074193][T24335] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid maxpacket 50411, setting to 1024 [ 1450.095667][T25079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.119506][T22380] usb 2-1: config 0 descriptor?? [ 1450.129887][T24335] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 1450.162130][T25079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.189403][T24335] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1450.218825][T25079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.231414][T24335] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1450.247033][T25079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.279790][T24335] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1450.298725][T24335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.329074][T24335] usb 3-1: Product: syz [ 1450.342330][T24335] usb 3-1: Manufacturer: syz [ 1450.365435][T24335] usb 3-1: SerialNumber: syz [ 1450.397381][T25088] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1450.411575][T25088] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1450.435875][T24335] usb 3-1: Expected 3 endpoints, found: 2 [ 1450.615715][T24335] usb 6-1: USB disconnect, device number 26 [ 1450.615828][T22380] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1450.829547][T25088] binder: 25087:25088 ioctl c0306201 200000000040 returned -14 [ 1450.917076][T22380] usb 3-1: USB disconnect, device number 67 [ 1451.154331][T25102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4515'. [ 1451.219098][T25105] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4516'. [ 1451.449415][T25110] kvm: user requested TSC rate below hardware speed [ 1451.965622][ T5697] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1452.167117][ T5697] usb 6-1: Using ep0 maxpacket: 32 [ 1452.190281][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.220705][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.240126][ T5697] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1452.258719][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.280035][ T5697] usb 6-1: config 0 descriptor?? [ 1452.716807][T24335] usb 2-1: USB disconnect, device number 69 [ 1452.730664][ T5697] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 1452.769470][ T5697] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 1452.925555][ T5697] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 1453.105966][T25125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4522'. [ 1453.127492][ T5697] ft260 0003:0403:6030.0018: failed to retrieve system status [ 1453.154661][ T5697] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -32 [ 1453.487783][T25144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4529'. [ 1453.576259][T22380] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1453.595536][ T29] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1453.725467][T22380] usb 3-1: Using ep0 maxpacket: 16 [ 1453.738527][T22380] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1453.754495][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 1453.767863][ T29] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1453.777828][T18841] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1453.786775][T22380] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1453.798949][ T29] usb 2-1: config 0 has no interface number 0 [ 1453.807989][T22380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.817281][ T29] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1453.829288][ T29] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1453.842102][T22380] usb 3-1: config 0 descriptor?? [ 1453.852013][T22380] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1453.862787][ T29] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1453.875007][ T29] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1453.886604][ T29] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1453.899456][ T29] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1453.910158][ T29] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1453.920814][ T29] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1453.931335][ T29] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1453.968467][ T29] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1453.979561][T18841] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1454.003105][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.013400][T18841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1454.024826][ T29] usb 2-1: Product: syz [ 1454.029385][ T29] usb 2-1: Manufacturer: syz [ 1454.042288][T18841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1454.058755][ T29] usb 2-1: SerialNumber: syz [ 1454.070584][T18841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1454.084569][ T29] usb 2-1: config 0 descriptor?? [ 1454.095979][T25142] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1454.117938][ T29] usb 2-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1454.126474][T18841] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1454.135632][ T29] usb 2-1: couldn't find an output bulk endpoint. Bailing out. [ 1454.144145][T18841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.183342][T18841] usb 5-1: config 0 descriptor?? [ 1454.406015][ T5697] usb 2-1: USB disconnect, device number 70 [ 1454.634911][T18841] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1454.762078][T18841] usb 6-1: USB disconnect, device number 27 [ 1455.637157][T18841] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1455.817764][T18841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.847528][T18841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.863576][T18841] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1455.873823][T18841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.888190][T18841] usb 2-1: config 0 descriptor?? [ 1455.975988][T25176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4539'. [ 1456.311977][T18841] usbhid 2-1:0.0: can't add hid device: -71 [ 1456.337679][T18841] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1456.378186][ T5697] usb 3-1: USB disconnect, device number 68 [ 1456.396203][T18841] usb 2-1: USB disconnect, device number 71 [ 1456.597345][T22380] usb 5-1: USB disconnect, device number 58 [ 1456.740198][T25189] EXT4-fs: Conflicting test_dummy_encryption options [ 1457.125549][T22380] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1457.133855][T22263] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1457.291150][T22380] usb 5-1: device descriptor read/64, error -71 [ 1457.326293][T22263] usb 6-1: Using ep0 maxpacket: 32 [ 1457.429280][T22263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.487819][T22263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.551086][T22263] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1457.566374][T22380] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1457.608729][T22263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.687013][T22263] usb 6-1: config 0 descriptor?? [ 1457.715690][T22380] usb 5-1: device descriptor read/64, error -71 [ 1457.849298][T22380] usb usb5-port1: attempt power cycle [ 1458.113899][T22263] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 1458.131211][T22263] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 1458.205473][T22380] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1458.246246][T22380] usb 5-1: device descriptor read/8, error -71 [ 1458.314785][T22263] ft260 0003:0403:6030.001A: chip code: 0000 0000 [ 1458.495475][T22380] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1458.522030][T22263] ft260 0003:0403:6030.001A: failed to retrieve system status [ 1458.536117][T22380] usb 5-1: device descriptor read/8, error -71 [ 1458.538041][T22263] ft260 0003:0403:6030.001A: probe with driver ft260 failed with error -32 [ 1458.677022][T22380] usb usb5-port1: unable to enumerate USB device [ 1458.813542][T25207] binder: 25206:25207 ioctl c0306201 200000000040 returned -22 [ 1459.205463][T22263] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1459.377037][T22263] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 1459.395437][T22263] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.415287][T22263] usb 3-1: config 8 has no interface number 0 [ 1459.429186][T22263] usb 3-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1459.451238][T22263] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1459.460792][T22263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.469760][T22263] usb 3-1: Product: syz [ 1459.473974][T22263] usb 3-1: Manufacturer: syz [ 1459.478949][T22263] usb 3-1: SerialNumber: syz [ 1459.889667][T22263] usb 3-1: USB disconnect, device number 69 [ 1459.932675][T18977] usb 6-1: USB disconnect, device number 28 [ 1459.987008][T22380] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1460.104255][T25224] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4557'. [ 1460.158058][T22380] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1460.182265][T22380] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1460.205744][T22380] usb 5-1: config 150 has no interface number 0 [ 1460.225767][T22380] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1460.238359][T22380] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1460.260274][T22380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.275445][T22380] usb 5-1: Product: syz [ 1460.285626][T22380] usb 5-1: Manufacturer: syz [ 1460.295593][T22380] usb 5-1: SerialNumber: syz [ 1460.520169][T22380] xr_serial 5-1:150.204: skipping garbage [ 1460.551599][T22380] xr_serial 5-1:150.204: xr_serial converter detected [ 1460.785479][T22263] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1460.825820][T24335] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1460.955445][T22263] usb 3-1: Using ep0 maxpacket: 16 [ 1460.972032][T22263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.001625][T22263] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1461.023018][T24335] usb 2-1: Using ep0 maxpacket: 16 [ 1461.042372][T24335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.053678][T22263] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1461.078087][T24335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1461.091618][T22263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.121860][T24335] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1461.123052][T22380] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1461.133746][T22263] usb 3-1: config 0 descriptor?? [ 1461.169631][T24335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.170761][T22380] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1461.192107][T24335] usb 2-1: Product: syz [ 1461.219426][T24335] usb 2-1: Manufacturer: syz [ 1461.228161][T24335] usb 2-1: SerialNumber: syz [ 1461.268350][T22380] usb 5-1: USB disconnect, device number 63 [ 1461.288101][T24335] usb 2-1: 0:2 : does not exist [ 1461.307260][T22380] xr_serial 5-1:150.204: device disconnected [ 1461.672412][T22263] HID 045e:07da: Invalid code 65791 type 1 [ 1461.714408][T22263] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001B/input/input19 [ 1461.770166][T22263] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1462.093365][T25251] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1462.152663][T24335] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1462.317832][T25235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4560'. [ 1462.320043][T24335] usb 2-1: USB disconnect, device number 72 [ 1462.375500][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4560'. [ 1462.431464][T25235] netlink: 'syz.2.4560': attribute type 14 has an invalid length. [ 1462.496393][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1462.578018][T25253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4566'. [ 1462.606284][T25258] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4568'. [ 1462.643793][T25253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4566'. [ 1462.789758][T24335] usb 3-1: USB disconnect, device number 70 [ 1462.854875][T25262] FAULT_INJECTION: forcing a failure. [ 1462.854875][T25262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.895632][T25262] CPU: 0 UID: 0 PID: 25262 Comm: syz.5.4570 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.895658][T25262] Tainted: [L]=SOFTLOCKUP [ 1462.895664][T25262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1462.895674][T25262] Call Trace: [ 1462.895682][T25262] [ 1462.895689][T25262] dump_stack_lvl+0xe8/0x150 [ 1462.895714][T25262] should_fail_ex+0x412/0x560 [ 1462.895739][T25262] _copy_from_user+0x2d/0xb0 [ 1462.895762][T25262] core_sys_select+0x578/0xc30 [ 1462.895796][T25262] ? __pfx_core_sys_select+0x10/0x10 [ 1462.895836][T25262] ? __pfx_set_user_sigmask+0x10/0x10 [ 1462.895852][T25262] ? kmem_cache_free+0x182/0x650 [ 1462.895873][T25262] ? fd_install+0x94/0x3d0 [ 1462.895899][T25262] __se_sys_pselect6+0x267/0x320 [ 1462.895921][T25262] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1462.895939][T25262] ? __pfx_ksys_write+0x10/0x10 [ 1462.895964][T25262] ? __x64_sys_pselect6+0x21/0xf0 [ 1462.895980][T25262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.895997][T25262] do_syscall_64+0x15f/0xf80 [ 1462.896016][T25262] ? trace_irq_disable+0x3b/0x140 [ 1462.896039][T25262] ? clear_bhb_loop+0x40/0x90 [ 1462.896059][T25262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.896074][T25262] RIP: 0033:0x7f49f599cdd9 [ 1462.896091][T25262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.896105][T25262] RSP: 002b:00007f49f3bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1462.896122][T25262] RAX: ffffffffffffffda RBX: 00007f49f5c15fa0 RCX: 00007f49f599cdd9 [ 1462.896133][T25262] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1462.896144][T25262] RBP: 00007f49f3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.896159][T25262] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1462.896170][T25262] R13: 00007f49f5c16038 R14: 00007f49f5c15fa0 R15: 00007f49f5d3fa48 [ 1462.896197][T25262] [ 1463.845645][T22380] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1463.853816][T25288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1463.861176][T25288] IPv6: NLM_F_CREATE should be set when creating new route [ 1464.022339][T22380] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1464.073861][T22380] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1464.154263][T22380] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1464.167121][T22380] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1464.176668][T22380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.191197][T22380] usb 3-1: Product: syz [ 1464.207049][T22380] usb 3-1: Manufacturer: syz [ 1464.221756][T22380] usb 3-1: SerialNumber: syz [ 1464.259174][T25280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1464.276209][T25280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1464.462454][T25312] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1464.487333][T25312] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1464.645920][T18977] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1464.837576][T18977] usb 6-1: Using ep0 maxpacket: 32 [ 1464.847228][T18977] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1464.865562][T18977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.884241][T18977] usb 6-1: config 0 has no interface number 0 [ 1464.898789][T18977] usb 6-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1464.925194][T18977] usb 6-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1464.975782][T18977] usb 6-1: config 0 interface 8 has no altsetting 0 [ 1465.023049][T18977] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1465.051013][T18977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.077501][T18977] usb 6-1: Product: syz [ 1465.102089][T18977] usb 6-1: Manufacturer: syz [ 1465.127567][T18977] usb 6-1: SerialNumber: syz [ 1465.166766][T18977] usb 6-1: config 0 descriptor?? [ 1465.410129][T22380] (unnamed net_device) (uninitialized): Assigned a random MAC address: 16:e0:99:04:e0:df [ 1465.420968][T22895] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 1465.465660][T18977] ath6kl: Failed to submit usb control message: -71 [ 1465.476538][T22380] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 1465.488551][T18977] ath6kl: unable to send the bmi data to the device: -71 [ 1465.513489][T18977] ath6kl: Unable to send get target info: -71 [ 1465.537123][T18977] ath6kl: Failed to init ath6kl core: -71 [ 1465.544222][T18977] ath6kl_usb 6-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1465.603173][T18977] usb 6-1: USB disconnect, device number 29 [ 1465.699878][T24335] usb 3-1: USB disconnect, device number 71 [ 1466.930342][T25364] binder: 25355:25364 ioctl 4018620d 0 returned -22 [ 1467.135598][T25378] sctp: [Deprecated]: syz.4.4606 (pid 25378) Use of int in max_burst socket option. [ 1467.135598][T25378] Use struct sctp_assoc_value instead [ 1467.145656][T24335] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1467.156493][T24692] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1467.180585][T25378] netlink: 'syz.4.4606': attribute type 27 has an invalid length. [ 1467.188895][T25378] netlink: 'syz.4.4606': attribute type 3 has an invalid length. [ 1467.197178][T25378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4606'. [ 1467.325462][T24335] usb 2-1: Using ep0 maxpacket: 8 [ 1467.336211][T24335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1467.359878][T24335] usb 2-1: config 2 has an invalid interface number: 99 but max is 0 [ 1467.383936][T24335] usb 2-1: config 2 has no interface number 0 [ 1467.415873][T24335] usb 2-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 1467.417724][T18977] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1467.440496][T24335] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1467.476477][T24335] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1467.487639][T24335] usb 2-1: config 2 interface 99 has no altsetting 0 [ 1467.515037][T24335] usb 2-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 1467.545603][T24335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.567037][T24335] usb 2-1: Product: syz [ 1467.572498][T24335] usb 2-1: Manufacturer: syz [ 1467.585439][T24335] usb 2-1: SerialNumber: syz [ 1467.589180][T18977] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1467.609978][T18977] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1467.636741][T18977] usb 3-1: config 150 has no interface number 0 [ 1467.663615][T18977] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1467.682481][T18977] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1467.705300][T18977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.733890][T18977] usb 3-1: Product: syz [ 1467.750073][T18977] usb 3-1: Manufacturer: syz [ 1467.765476][T18977] usb 3-1: SerialNumber: syz [ 1467.843683][T24335] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.99/input/input20 [ 1468.003168][T18977] xr_serial 3-1:150.204: skipping garbage [ 1468.032974][T18977] xr_serial 3-1:150.204: xr_serial converter detected [ 1468.225245][T25370] vlan2: entered allmulticast mode [ 1468.244325][T25370] team0: entered allmulticast mode [ 1468.258593][T25370] team_slave_0: entered allmulticast mode [ 1468.290983][T25370] team_slave_1: entered allmulticast mode [ 1468.418976][T18841] usb 2-1: USB disconnect, device number 73 [ 1468.468062][T25412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4613'. [ 1468.593406][T18977] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1468.595475][T24335] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1468.607500][T18977] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1468.641245][T18977] usb 3-1: USB disconnect, device number 72 [ 1468.670959][T18977] xr_serial 3-1:150.204: device disconnected [ 1468.786512][T24335] usb 5-1: Using ep0 maxpacket: 8 [ 1468.797640][T25422] FAULT_INJECTION: forcing a failure. [ 1468.797640][T25422] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.805627][T24335] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1468.812510][T25422] CPU: 1 UID: 0 PID: 25422 Comm: syz.5.4617 Tainted: G L syzkaller #0 PREEMPT(full) [ 1468.812534][T25422] Tainted: [L]=SOFTLOCKUP [ 1468.812540][T25422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1468.812549][T25422] Call Trace: [ 1468.812556][T25422] [ 1468.812564][T25422] dump_stack_lvl+0xe8/0x150 [ 1468.812588][T25422] should_fail_ex+0x412/0x560 [ 1468.812612][T25422] should_failslab+0xa8/0x100 [ 1468.812636][T25422] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1468.812657][T25422] ? __alloc_skb+0x186/0x7d0 [ 1468.812675][T25422] ? __alloc_skb+0x1d0/0x7d0 [ 1468.812691][T25422] ? __local_bh_enable_ip+0xd0/0x130 [ 1468.812711][T25422] __alloc_skb+0x1d0/0x7d0 [ 1468.812732][T25422] netlink_sendmsg+0x5d4/0xb40 [ 1468.812761][T25422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1468.812784][T25422] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1468.812804][T25422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1468.812826][T25422] ____sys_sendmsg+0x972/0x9f0 [ 1468.812846][T25422] ? __might_fault+0xaf/0x130 [ 1468.812870][T25422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1468.812899][T25422] ? import_iovec+0x73/0xa0 [ 1468.812922][T25422] ___sys_sendmsg+0x2a5/0x360 [ 1468.812941][T25422] ? __lock_acquire+0x6b5/0x2cf0 [ 1468.812961][T25422] ? __pfx____sys_sendmsg+0x10/0x10 [ 1468.813010][T25422] ? __fget_files+0x2a/0x420 [ 1468.813027][T25422] ? __fget_files+0x3a0/0x420 [ 1468.813053][T25422] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1468.813075][T25422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1468.813104][T25422] ? __pfx_ksys_write+0x10/0x10 [ 1468.813130][T25422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.813147][T25422] do_syscall_64+0x15f/0xf80 [ 1468.813165][T25422] ? trace_irq_disable+0x3b/0x140 [ 1468.813187][T25422] ? clear_bhb_loop+0x40/0x90 [ 1468.813206][T25422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.813220][T25422] RIP: 0033:0x7f49f599cdd9 [ 1468.813236][T25422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.813248][T25422] RSP: 002b:00007f49f3bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1468.813265][T25422] RAX: ffffffffffffffda RBX: 00007f49f5c15fa0 RCX: 00007f49f599cdd9 [ 1468.813284][T25422] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1468.813294][T25422] RBP: 00007f49f3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.813304][T25422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.813312][T25422] R13: 00007f49f5c16038 R14: 00007f49f5c15fa0 R15: 00007f49f5d3fa48 [ 1468.813337][T25422] [ 1468.922675][T25424] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4618'. [ 1469.190659][T24335] usb 5-1: config 236 has an invalid interface number: 181 but max is 0 [ 1469.209866][T24335] usb 5-1: config 236 has no interface number 0 [ 1469.227639][T24335] usb 5-1: New USB device found, idVendor=2304, idProduct=0229, bcdDevice=d7.12 [ 1469.237063][T24335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.249203][T24335] usb 5-1: Product: syz [ 1469.259097][T24335] usb 5-1: Manufacturer: syz [ 1469.265453][T24335] usb 5-1: SerialNumber: syz [ 1469.486418][ T5697] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1469.511350][T25410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4612'. [ 1469.607020][T24335] usb-storage 5-1:236.181: USB Mass Storage device detected [ 1469.608507][T18977] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1469.666439][ T5697] usb 6-1: Using ep0 maxpacket: 32 [ 1469.698456][T24335] dvb-usb: found a 'Pinnacle PCTV Dual DVB-T Diversity Stick' in cold state, will try to load a firmware [ 1469.727107][ T5697] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1469.737379][ T5697] usb 6-1: config 0 has no interface number 0 [ 1469.748960][ T5697] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1469.800728][ T5697] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1469.830521][ T5697] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1469.846103][T18977] usb 2-1: Using ep0 maxpacket: 16 [ 1469.853319][T18977] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 1469.862297][ T5697] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1469.862328][ T5697] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1469.862350][ T5697] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1469.862369][ T5697] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1469.862387][ T5697] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1469.862405][ T5697] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1469.868665][ T5697] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1469.915928][T18977] usb 2-1: config 252 has no interface number 0 [ 1469.936412][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.976941][T24335] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1469.985287][T18977] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1469.988238][T24335] dib0700: firmware download failed at 7 with -22 [ 1470.021839][T18977] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1470.036156][ T5697] usb 6-1: Product: syz [ 1470.040636][T24335] usb 5-1: USB disconnect, device number 64 [ 1470.051481][ T5697] usb 6-1: Manufacturer: syz [ 1470.053487][T18977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.057898][T25456] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4630'. [ 1470.077681][ T5697] usb 6-1: SerialNumber: syz [ 1470.094367][T18977] usb 2-1: Product: syz [ 1470.103570][ T5697] usb 6-1: config 0 descriptor?? [ 1470.107634][T18977] usb 2-1: Manufacturer: syz [ 1470.122690][T25433] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1470.137508][T18977] usb 2-1: SerialNumber: syz [ 1470.138798][ T5697] usb 6-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1470.153927][ T5697] usb 6-1: couldn't find an output bulk endpoint. Bailing out. [ 1470.187661][T18977] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1470.418760][T25435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.451044][T22380] usb 6-1: USB disconnect, device number 30 [ 1470.466283][T25435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.503401][T25435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4623'. [ 1470.581150][T24692] usb 2-1: Failed to submit usb control message: -71 [ 1470.583523][T18977] usb 2-1: USB disconnect, device number 74 [ 1470.589184][T24692] usb 2-1: unable to send the bmi data to the device: -71 [ 1470.611628][T24692] usb 2-1: unable to get target info from device [ 1470.618736][T24692] usb 2-1: could not get target info (-71) [ 1470.624612][T24692] usb 2-1: could not probe fw (-71) [ 1471.724967][T25484] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1472.061810][T25496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4642'. [ 1472.595449][T24335] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1472.774492][T25500] netlink: 'syz.4.4644': attribute type 1 has an invalid length. [ 1472.797921][T24335] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1472.835135][T24335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.857431][T24335] usb 3-1: Product: syz [ 1472.865288][T24335] usb 3-1: Manufacturer: syz [ 1472.870092][T24335] usb 3-1: SerialNumber: syz [ 1472.955235][T25500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1473.157132][T25502] bond1: (slave veth1): Enslaving as an active interface with a down link [ 1473.175916][T25503] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4644'. [ 1473.207290][T25500] bond1: (slave dummy0): making interface the new active one [ 1473.221011][T25500] dummy0: entered promiscuous mode [ 1473.233008][T25500] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1473.301071][T25503] bond1: (slave dummy0): Releasing active interface [ 1473.313997][T25498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.350408][T25498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.373824][T25503] dummy0 (unregistering): left promiscuous mode [ 1473.653365][T24335] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5e:17:08:36:7b:47 [ 1473.700331][T24335] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 1473.715475][T18977] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1473.720175][T24335] usb 3-1: USB disconnect, device number 73 [ 1473.916817][T18977] usb 6-1: Using ep0 maxpacket: 32 [ 1473.934184][T18977] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1473.952977][T18977] usb 6-1: config 0 has no interface number 0 [ 1473.959228][T18977] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1473.980765][T18977] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1474.004838][T18977] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1474.034047][T18977] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1474.054284][T18977] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1474.076256][T18977] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1474.096958][T18977] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1474.119371][T18977] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1474.140774][T18977] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1474.172288][T18977] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1474.190184][T18977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.205600][T18977] usb 6-1: Product: syz [ 1474.209908][T18977] usb 6-1: Manufacturer: syz [ 1474.215184][T18977] usb 6-1: SerialNumber: syz [ 1474.230028][T18977] usb 6-1: config 0 descriptor?? [ 1474.236648][T25509] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1474.253952][T18977] usb 6-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1474.264102][T18977] usb 6-1: couldn't find an output bulk endpoint. Bailing out. [ 1474.334823][T25523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4652'. [ 1474.434636][T25525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4653'. [ 1474.545663][T24335] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1474.651540][ T5697] usb 6-1: USB disconnect, device number 31 [ 1474.719437][T24335] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1474.737130][T24335] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1474.756940][T24335] usb 2-1: config 150 has no interface number 0 [ 1474.775631][T24335] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1474.786881][T24335] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1474.804846][T24335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.824789][T24335] usb 2-1: Product: syz [ 1474.844570][T24335] usb 2-1: Manufacturer: syz [ 1474.849557][T24335] usb 2-1: SerialNumber: syz [ 1474.855494][T18977] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1474.995671][T18977] usb 3-1: device descriptor read/64, error -71 [ 1475.035444][T22380] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1475.075249][T24335] xr_serial 2-1:150.204: skipping garbage [ 1475.095466][T24335] xr_serial 2-1:150.204: xr_serial converter detected [ 1475.195756][T22380] usb 5-1: Using ep0 maxpacket: 32 [ 1475.207434][T22380] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 1475.220714][T22380] usb 5-1: config 0 has no interface number 0 [ 1475.242697][T22380] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1475.253917][T18977] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1475.282328][T22380] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1475.298959][T22380] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1475.312678][T22380] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1475.323954][T22380] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1475.337412][T22380] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1475.348906][T22380] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1475.359396][T22380] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1475.369802][T22380] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1475.389031][T22380] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1475.398363][T18977] usb 3-1: device descriptor read/64, error -71 [ 1475.415709][T22380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.431966][T22380] usb 5-1: Product: syz [ 1475.440301][T22380] usb 5-1: Manufacturer: syz [ 1475.446140][T22380] usb 5-1: SerialNumber: syz [ 1475.467527][T22380] usb 5-1: config 0 descriptor?? [ 1475.473035][T24335] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 1475.479195][T25530] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1475.490229][T22380] usb 5-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1475.495821][T24335] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1475.500217][T22380] usb 5-1: couldn't find an output bulk endpoint. Bailing out. [ 1475.518442][T18977] usb usb3-port1: attempt power cycle [ 1475.548285][T24335] usb 2-1: USB disconnect, device number 75 [ 1475.566773][T24335] xr_serial 2-1:150.204: device disconnected [ 1475.685528][T18841] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1475.776131][T22380] usb 5-1: USB disconnect, device number 65 [ 1475.855474][T18977] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1475.863279][T18841] usb 6-1: Using ep0 maxpacket: 16 [ 1475.878245][T18841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.904043][T18841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1475.922054][T18977] usb 3-1: device descriptor read/8, error -71 [ 1475.939586][T18841] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1475.961183][T18841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.985015][T18841] usb 6-1: config 0 descriptor?? [ 1476.165513][T18977] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1476.196258][T18977] usb 3-1: device descriptor read/8, error -71 [ 1476.317510][T18977] usb usb3-port1: unable to enumerate USB device [ 1476.412531][T18841] microsoft 0003:045E:07DA.001C: ignoring exceeding usage max [ 1476.438494][T18841] HID 045e:07da: Invalid code 65791 type 1 [ 1476.456257][T18841] HID 045e:07da: Invalid code 768 type 1 [ 1476.462737][T18841] HID 045e:07da: Invalid code 769 type 1 [ 1476.469862][T18841] HID 045e:07da: Invalid code 770 type 1 [ 1476.475668][T18841] HID 045e:07da: Invalid code 771 type 1 [ 1476.481757][T18841] HID 045e:07da: Invalid code 772 type 1 [ 1476.488871][T18841] HID 045e:07da: Invalid code 773 type 1 [ 1476.494857][T18841] HID 045e:07da: Invalid code 774 type 1 [ 1476.501812][T18841] HID 045e:07da: Invalid code 775 type 1 [ 1476.508641][T18841] HID 045e:07da: Invalid code 776 type 1 [ 1476.540245][T18841] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001C/input/input21 [ 1476.609871][T25534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.633083][T25545] FAULT_INJECTION: forcing a failure. [ 1476.633083][T25545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1476.652218][T25534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.658173][T18841] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1476.699071][T25545] CPU: 0 UID: 0 PID: 25545 Comm: syz.4.4661 Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.699097][T25545] Tainted: [L]=SOFTLOCKUP [ 1476.699103][T25545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1476.699113][T25545] Call Trace: [ 1476.699119][T25545] [ 1476.699126][T25545] dump_stack_lvl+0xe8/0x150 [ 1476.699151][T25545] should_fail_ex+0x412/0x560 [ 1476.699177][T25545] _copy_from_user+0x2d/0xb0 [ 1476.699200][T25545] ___sys_sendmsg+0x1c6/0x360 [ 1476.699220][T25545] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.699240][T25545] ? __pfx____sys_sendmsg+0x10/0x10 [ 1476.699291][T25545] ? __fget_files+0x2a/0x420 [ 1476.699309][T25545] ? __fget_files+0x3a0/0x420 [ 1476.699335][T25545] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1476.699359][T25545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1476.699388][T25545] ? __pfx_ksys_write+0x10/0x10 [ 1476.699417][T25545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.699434][T25545] do_syscall_64+0x15f/0xf80 [ 1476.699463][T25545] ? trace_irq_disable+0x3b/0x140 [ 1476.699484][T25545] ? clear_bhb_loop+0x40/0x90 [ 1476.699501][T25545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.699517][T25545] RIP: 0033:0x7f24fb99cdd9 [ 1476.699533][T25545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.699547][T25545] RSP: 002b:00007f24fc8fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1476.699565][T25545] RAX: ffffffffffffffda RBX: 00007f24fbc15fa0 RCX: 00007f24fb99cdd9 [ 1476.699576][T25545] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1476.699586][T25545] RBP: 00007f24fc8fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.699596][T25545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.699606][T25545] R13: 00007f24fbc16038 R14: 00007f24fbc15fa0 R15: 00007f24fbd3fa48 [ 1476.699633][T25545] [ 1477.074233][T18841] usb 6-1: USB disconnect, device number 32 [ 1477.224259][T25548] fido_id[25548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1477.805995][T25554] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1478.005533][T18841] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1478.185536][T18841] usb 6-1: Using ep0 maxpacket: 16 [ 1478.197196][T18841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.230366][T18841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1478.257545][T18841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1478.293496][T18841] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1478.320768][T18841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.357655][T18841] usb 6-1: config 0 descriptor?? [ 1478.811249][T18841] usbhid 6-1:0.0: can't add hid device: -71 [ 1478.822957][T18841] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1478.841986][T18841] usb 6-1: USB disconnect, device number 33 [ 1479.185458][T22380] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1479.356121][T22380] usb 2-1: Using ep0 maxpacket: 8 [ 1479.396725][T22380] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1479.426612][T22380] usb 2-1: config 0 has no interface number 0 [ 1479.444693][T22380] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1479.469588][T22380] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1479.485784][T22380] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1479.497552][T22380] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1479.513085][T22380] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1479.523503][T22380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.543317][T22380] usb 2-1: config 0 descriptor?? [ 1479.568157][T22380] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1479.641073][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 1479.641110][ T30] audit: type=1326 audit(1777776344.973:33670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.5.4673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f599cdd9 code=0x7ffc0000 [ 1479.688917][T25582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4672'. [ 1479.729451][T25583] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4673'. [ 1479.745783][ T30] audit: type=1326 audit(1777776345.013:33671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.5.4673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f599cdd9 code=0x7ffc0000 [ 1479.811568][ T30] audit: type=1326 audit(1777776345.043:33672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.5.4673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49f599cdd9 code=0x7ffc0000 [ 1479.880763][ T30] audit: type=1326 audit(1777776345.043:33673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.5.4673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f599cdd9 code=0x7ffc0000 [ 1479.986538][ T30] audit: type=1326 audit(1777776345.043:33674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.5.4673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f599cdd9 code=0x7ffc0000 [ 1480.020941][ T30] audit: type=1326 audit(1777776345.043:33675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.5.4673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f49f599cdd9 code=0x7ffc0000 [ 1480.108827][ T30] audit: type=1326 audit(1777776345.053:33676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.5.4673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f599cdd9 code=0x7ffc0000 [ 1480.108965][T25591] FAULT_INJECTION: forcing a failure. [ 1480.108965][T25591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1480.226495][T25591] CPU: 0 UID: 0 PID: 25591 Comm: syz.3.4676 Tainted: G L syzkaller #0 PREEMPT(full) [ 1480.226519][T25591] Tainted: [L]=SOFTLOCKUP [ 1480.226527][T25591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1480.226536][T25591] Call Trace: [ 1480.226543][T25591] [ 1480.226551][T25591] dump_stack_lvl+0xe8/0x150 [ 1480.226577][T25591] should_fail_ex+0x412/0x560 [ 1480.226602][T25591] _copy_from_user+0x2d/0xb0 [ 1480.226625][T25591] ___sys_recvmsg+0x175/0x590 [ 1480.226651][T25591] ? __pfx____sys_recvmsg+0x10/0x10 [ 1480.226676][T25591] ? __fget_files+0x2a/0x420 [ 1480.226714][T25591] ? __fget_files+0x3a0/0x420 [ 1480.226737][T25591] do_recvmmsg+0x334/0x800 [ 1480.226760][T25591] ? __pfx_do_recvmmsg+0x10/0x10 [ 1480.226792][T25591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1480.226828][T25591] __x64_sys_recvmmsg+0x198/0x250 [ 1480.226853][T25591] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1480.226879][T25591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.226891][T25591] do_syscall_64+0x15f/0xf80 [ 1480.226902][T25591] ? trace_irq_disable+0x3b/0x140 [ 1480.226918][T25591] ? clear_bhb_loop+0x40/0x90 [ 1480.226929][T25591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.226942][T25591] RIP: 0033:0x7fb4e3b9cdd9 [ 1480.226958][T25591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.226971][T25591] RSP: 002b:00007fb4e4a21028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1480.226988][T25591] RAX: ffffffffffffffda RBX: 00007fb4e3e15fa0 RCX: 00007fb4e3b9cdd9 [ 1480.227000][T25591] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000003 [ 1480.227010][T25591] RBP: 00007fb4e4a21090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.227019][T25591] R10: 0000000000002020 R11: 0000000000000246 R12: 0000000000000001 [ 1480.227029][T25591] R13: 00007fb4e3e16038 R14: 00007fb4e3e15fa0 R15: 00007fb4e3f3fa48 [ 1480.227056][T25591] [ 1480.427736][ T30] audit: type=1326 audit(1777776345.053:33677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.5.4673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f599cdd9 code=0x7ffc0000 [ 1480.452508][ T30] audit: type=1326 audit(1777776345.053:33678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.5.4673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f599cdd9 code=0x7ffc0000 [ 1480.477003][T22380] usb 2-1: USB disconnect, device number 76 [ 1480.483359][ T30] audit: type=1326 audit(1777776345.053:33679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.5.4673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49f599cdd9 code=0x7ffc0000 [ 1480.489093][T22380] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1481.035441][ T5697] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1481.195665][ T5697] usb 5-1: Using ep0 maxpacket: 16 [ 1481.214919][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1481.229465][ T5697] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1481.274749][ T5697] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1481.309805][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.350547][ T5697] usb 5-1: config 0 descriptor?? [ 1481.778211][ T5697] microsoft 0003:045E:07DA.001D: ignoring exceeding usage max [ 1481.810148][ T5697] hid_map_usage: 11766 callbacks suppressed [ 1481.810174][ T5697] HID 045e:07da: Invalid code 65791 type 1 [ 1481.845984][ T5697] HID 045e:07da: Invalid code 768 type 1 [ 1481.864286][ T5697] HID 045e:07da: Invalid code 769 type 1 [ 1481.901400][ T5697] HID 045e:07da: Invalid code 770 type 1 [ 1481.920838][ T5697] HID 045e:07da: Invalid code 771 type 1 [ 1481.933251][ T5697] HID 045e:07da: Invalid code 772 type 1 [ 1481.953445][ T5697] HID 045e:07da: Invalid code 773 type 1 [ 1481.959487][ T5697] HID 045e:07da: Invalid code 774 type 1 [ 1481.974580][ T5697] HID 045e:07da: Invalid code 775 type 1 [ 1481.977287][T25600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.009096][ T5697] HID 045e:07da: Invalid code 776 type 1 [ 1482.016863][T25600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.124932][ T5697] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001D/input/input22 [ 1482.155470][T22380] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1482.287153][ T5697] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1482.314645][T22380] usb 2-1: Using ep0 maxpacket: 16 [ 1482.338100][T22380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.340529][ T5697] usb 5-1: USB disconnect, device number 66 [ 1482.387963][T22380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.429834][T22380] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1482.467285][T22380] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1482.482842][T25618] fido_id[25618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1482.498459][T22380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.534036][T22380] usb 2-1: config 0 descriptor?? [ 1482.587547][T25620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4686'. [ 1482.975055][T22380] usbhid 2-1:0.0: can't add hid device: -71 [ 1483.008781][T22380] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1483.062081][T22380] usb 2-1: USB disconnect, device number 77 [ 1483.279485][T25623] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1483.340338][T25623] bond2 (unregistering): Released all slaves [ 1483.366961][T25625] binder: BINDER_SET_CONTEXT_MGR already set [ 1483.406095][T25625] binder: 25622:25625 ioctl 40046207 0 returned -16 [ 1483.694854][T24335] IPVS: starting estimator thread 0... [ 1483.699022][T25628] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1483.807732][T25630] IPVS: using max 56 ests per chain, 134400 per kthread [ 1484.427133][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.433631][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.505726][ T29] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1484.667920][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1484.681913][T25651] FAULT_INJECTION: forcing a failure. [ 1484.681913][T25651] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.683954][ T29] usb 6-1: not running at top speed; connect to a high speed hub [ 1484.706913][T25651] CPU: 0 UID: 0 PID: 25651 Comm: syz.4.4698 Tainted: G L syzkaller #0 PREEMPT(full) [ 1484.706939][T25651] Tainted: [L]=SOFTLOCKUP [ 1484.706945][T25651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1484.706955][T25651] Call Trace: [ 1484.706962][T25651] [ 1484.706970][T25651] dump_stack_lvl+0xe8/0x150 [ 1484.706997][T25651] should_fail_ex+0x412/0x560 [ 1484.707025][T25651] should_failslab+0xa8/0x100 [ 1484.707051][T25651] __kmalloc_noprof+0xe8/0x760 [ 1484.707074][T25651] ? io_cache_alloc_new+0x40/0x100 [ 1484.707190][T25651] io_cache_alloc_new+0x40/0x100 [ 1484.707211][T25651] io_msg_alloc_async+0x212/0x380 [ 1484.707259][T25651] io_connect_prep+0x1b1/0x300 [ 1484.707288][T25651] io_submit_sqes+0xb8d/0x2240 [ 1484.707386][T25651] __se_sys_io_uring_enter+0x341/0x1c40 [ 1484.707411][T25651] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1484.707443][T25651] ? __fget_files+0x3a0/0x420 [ 1484.707467][T25651] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1484.707489][T25651] ? fput+0xa0/0xd0 [ 1484.707508][T25651] ? ksys_write+0x242/0x270 [ 1484.707533][T25651] ? __pfx_ksys_write+0x10/0x10 [ 1484.707560][T25651] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1484.707586][T25651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.707605][T25651] do_syscall_64+0x15f/0xf80 [ 1484.707624][T25651] ? trace_irq_disable+0x3b/0x140 [ 1484.707648][T25651] ? clear_bhb_loop+0x40/0x90 [ 1484.707669][T25651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.707686][T25651] RIP: 0033:0x7f24fb99cdd9 [ 1484.707708][T25651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1484.707724][T25651] RSP: 002b:00007f24fc8fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1484.707742][T25651] RAX: ffffffffffffffda RBX: 00007f24fbc15fa0 RCX: 00007f24fb99cdd9 [ 1484.707754][T25651] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1484.707765][T25651] RBP: 00007f24fc8fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1484.707776][T25651] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1484.707786][T25651] R13: 00007f24fbc16038 R14: 00007f24fbc15fa0 R15: 00007f24fbd3fa48 [ 1484.707814][T25651] [ 1484.728601][ T29] usb 6-1: config 13 has an invalid interface number: 102 but max is 0 [ 1484.947845][ T29] usb 6-1: config 13 has an invalid descriptor of length 1, skipping remainder of the config [ 1484.958141][ T29] usb 6-1: config 13 has no interface number 0 [ 1484.967928][ T29] usb 6-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 1484.977189][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.008667][ T29] usb 6-1: Product: syz [ 1485.026085][ T29] usb 6-1: Manufacturer: syz [ 1485.035524][ T29] usb 6-1: SerialNumber: syz [ 1485.075450][T22380] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1485.125803][ T5697] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1485.225430][T22380] usb 2-1: Using ep0 maxpacket: 32 [ 1485.233079][T22380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.244683][T22380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.260973][T25644] netlink: 'syz.5.4693': attribute type 1 has an invalid length. [ 1485.270897][T22380] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1485.284137][T22380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.296573][T22380] usb 2-1: config 0 descriptor?? [ 1485.301584][ T5697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1485.303612][ T5697] usb 5-1: not running at top speed; connect to a high speed hub [ 1485.328434][ T5697] usb 5-1: config 39 has an invalid interface number: 165 but max is 0 [ 1485.336789][ T5697] usb 5-1: config 39 has no interface number 0 [ 1485.339006][T25666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4693'. [ 1485.343011][ T5697] usb 5-1: config 39 interface 165 has no altsetting 0 [ 1485.367258][ T5697] usb 5-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=da.9f [ 1485.377185][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.385219][ T5697] usb 5-1: Product: syz [ 1485.389567][ T5697] usb 5-1: Manufacturer: syz [ 1485.394412][ T5697] usb 5-1: SerialNumber: syz [ 1485.395809][T18977] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1485.553242][ T29] cdc_phonet 6-1:13.102: skipping garbage [ 1485.570138][ T29] cdc_phonet 6-1:13.102: skipping garbage [ 1485.578171][T18977] usb 3-1: Using ep0 maxpacket: 16 [ 1485.588761][ T29] cdc_phonet 6-1:13.102: skipping garbage [ 1485.605321][ T29] cdc_phonet 6-1:13.102: probe with driver cdc_phonet failed with error -22 [ 1485.620066][T18977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.623333][T25658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.634674][T18977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1485.663366][ T29] usb 6-1: USB disconnect, device number 34 [ 1485.678159][T18977] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1485.684239][T25658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.690782][T18977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.724476][T18977] usb 3-1: config 0 descriptor?? [ 1485.764890][T25658] openvswitch: netlink: Actions may not be safe on all matching packets [ 1485.828093][ T5697] usb 5-1: USB disconnect, device number 67 [ 1485.879004][T22380] usbhid 2-1:0.0: can't add hid device: -71 [ 1485.885274][T22380] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1485.914327][T22380] usb 2-1: USB disconnect, device number 78 [ 1486.142554][T18977] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max [ 1486.237315][T18977] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001E/input/input23 [ 1486.314811][T18977] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1486.356127][T25664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.397659][T25664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.683731][T22380] usb 3-1: USB disconnect, device number 78 [ 1486.746358][T18977] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1486.896593][ T5697] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1486.929357][T18977] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1486.968217][T18977] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1487.017409][T18977] usb 5-1: config 150 has no interface number 0 [ 1487.030760][T18977] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1487.045483][ T5697] usb 2-1: device descriptor read/64, error -71 [ 1487.073906][T18977] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1487.092703][T18977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.114891][T18977] usb 5-1: Product: syz [ 1487.134350][T18977] usb 5-1: Manufacturer: syz [ 1487.140871][T18977] usb 5-1: SerialNumber: syz [ 1487.306575][ T5697] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1487.356766][T18977] xr_serial 5-1:150.204: skipping garbage [ 1487.387745][T18977] xr_serial 5-1:150.204: xr_serial converter detected [ 1487.475846][ T5697] usb 2-1: device descriptor read/64, error -71 [ 1487.598591][ T5697] usb usb2-port1: attempt power cycle [ 1487.760812][T18977] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 1487.780811][T18977] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1487.822016][T18977] usb 5-1: USB disconnect, device number 68 [ 1487.841750][T18977] xr_serial 5-1:150.204: device disconnected [ 1487.966529][ T5697] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1488.006457][ T5697] usb 2-1: device descriptor read/8, error -71 [ 1488.267341][ T5697] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1488.306152][ T5697] usb 2-1: device descriptor read/8, error -71 [ 1488.428213][ T5697] usb usb2-port1: unable to enumerate USB device [ 1488.535454][T18977] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1488.705534][T18977] usb 3-1: Using ep0 maxpacket: 16 [ 1488.720366][T18977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.741818][T18977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1488.780031][T18977] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1488.808870][T18977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.851685][T18977] usb 3-1: config 0 descriptor?? [ 1488.869611][T25712] mmap: syz.4.4720 (25712) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1489.025447][T25719] loop2: detected capacity change from 0 to 7 [ 1489.099358][T25692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.138292][T25692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.202146][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 1489.202162][ T30] audit: type=1326 audit(1777776354.533:33814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25691 comm="syz.2.4711" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3c19cdd9 code=0x7ffc0000 [ 1489.236096][T25692] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0025 with DS=0x6 [ 1489.260555][ T30] audit: type=1326 audit(1777776354.533:33815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25691 comm="syz.2.4711" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3c19cdd9 code=0x7ffc0000 [ 1489.288411][T25722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4723'. [ 1489.347379][T25727] lo: Caught tx_queue_len zero misconfig [ 1489.358617][ T30] audit: type=1326 audit(1777776354.533:33816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25691 comm="syz.2.4711" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3c19cdd9 code=0x7ffc0000 [ 1489.374868][T25719] Dev loop2: unable to read RDB block 7 [ 1489.434720][ T30] audit: type=1326 audit(1777776354.573:33817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25691 comm="syz.2.4711" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e3c15d60e code=0x7ffc0000 [ 1489.464855][ T30] audit: type=1326 audit(1777776354.673:33818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25691 comm="syz.2.4711" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3c19cdd9 code=0x7ffc0000 [ 1489.493960][T25719] loop2: AHDI p2 p3 [ 1489.500526][T25719] loop2: partition table partially beyond EOD, truncated [ 1489.610729][ T30] audit: type=1326 audit(1777776354.673:33819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25691 comm="syz.2.4711" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6e3c19cb42 code=0x7ffc0000 [ 1489.659537][ T30] audit: type=1326 audit(1777776354.673:33820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25691 comm="syz.2.4711" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6e3c19cbd7 code=0x7ffc0000 [ 1489.662983][T18977] microsoft 0003:045E:07DA.001F: report_id 898192195 is invalid [ 1489.794947][T18977] microsoft 0003:045E:07DA.001F: item 0 4 1 8 parsing failed [ 1489.810567][T18977] microsoft 0003:045E:07DA.001F: parse failed [ 1489.829567][T18977] microsoft 0003:045E:07DA.001F: probe with driver microsoft failed with error -22 [ 1489.862384][ T30] audit: type=1326 audit(1777776354.673:33821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25691 comm="syz.2.4711" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6e3c159ad1 code=0x7ffc0000 [ 1489.912845][T25733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4725'. [ 1490.011754][ T30] audit: type=1326 audit(1777776354.673:33822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25691 comm="syz.2.4711" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6e3c19dbc9 code=0x7ffc0000 [ 1490.050282][T25738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4726'. [ 1490.172205][ T30] audit: type=1326 audit(1777776354.673:33823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25691 comm="syz.2.4711" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6e3c159b3b code=0x7ffc0000 [ 1490.627931][T25727] loop2: detected capacity change from 0 to 7 [ 1490.657597][T25727] loop2: [ 1490.673674][T25727] loop2: partition table partially beyond EOD, truncated [ 1491.832279][ T5697] usb 3-1: USB disconnect, device number 79 [ 1491.863114][T22895] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1491.950310][T25759] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4735'. [ 1492.927299][T25784] loop2: detected capacity change from 0 to 7 [ 1493.064346][T25784] Dev loop2: unable to read RDB block 7 [ 1493.102114][T25784] loop2: AHDI p2 p3 [ 1493.120965][T25784] loop2: partition table partially beyond EOD, truncated [ 1493.266565][T18841] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1493.445834][T18841] usb 2-1: Using ep0 maxpacket: 32 [ 1493.461357][T18841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.506379][T18841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.533935][T18841] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1493.595127][T18841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.627211][T18841] usb 2-1: config 0 descriptor?? [ 1493.678605][ T4996] Dev loop2: unable to read RDB block 7 [ 1493.693807][ T4996] loop2: AHDI p2 p3 [ 1493.701586][ T4996] loop2: partition table partially beyond EOD, truncated [ 1493.739764][T25800] binder: 25799:25800 ioctl 40047438 200000000a40 returned -22 [ 1494.086838][T18841] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 1494.128573][T18841] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 1494.256096][T18841] ft260 0003:0403:6030.0020: chip code: 0000 0000 [ 1494.317702][T25808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1494.325026][T25808] IPv6: NLM_F_CREATE should be set when creating new route [ 1494.457729][T18841] ft260 0003:0403:6030.0020: failed to retrieve system status [ 1494.487449][T18841] ft260 0003:0403:6030.0020: probe with driver ft260 failed with error -71 [ 1494.581564][T18841] usb 2-1: USB disconnect, device number 83 [ 1494.645783][T25814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1495.207180][T18841] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1495.375726][T18841] usb 6-1: Using ep0 maxpacket: 16 [ 1495.403575][T18841] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1495.417606][T18841] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1495.427182][T18841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.435261][T18841] usb 6-1: Product: syz [ 1495.440597][T18841] usb 6-1: Manufacturer: syz [ 1495.445237][T18841] usb 6-1: SerialNumber: syz [ 1495.476230][T18841] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1495.525821][T22380] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1495.690907][T22380] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1495.718718][T22380] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 1495.735765][T18977] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1495.747286][T22380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.767380][T22380] usb 5-1: Product: syz [ 1495.780261][T22380] usb 5-1: Manufacturer: syz [ 1495.793542][T22380] usb 5-1: SerialNumber: syz [ 1495.800673][T25804] bridge1: entered promiscuous mode [ 1495.818695][T25804] bridge1: entered allmulticast mode [ 1495.907830][T18977] usb 3-1: Using ep0 maxpacket: 32 [ 1495.923642][T18977] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1495.953191][T18977] usb 3-1: config 0 has no interface number 0 [ 1495.960043][T18977] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1495.971923][T18977] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1495.997129][T18841] usb 6-1: USB disconnect, device number 35 [ 1496.009204][T18977] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1496.057884][T25834] openvswitch: netlink: VLAN attribute unexpected. [ 1496.072656][T18977] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1496.106675][T18977] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1496.142681][T18977] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1496.160494][T22380] option 5-1:4.0: GSM modem (1-port) converter detected [ 1496.186366][T18977] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1496.202768][T22380] usb 5-1: USB disconnect, device number 69 [ 1496.234471][T22380] option 5-1:4.0: device disconnected [ 1496.244630][T18977] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1496.272810][T18977] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1496.286505][T25860] FAULT_INJECTION: forcing a failure. [ 1496.286505][T25860] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.320925][T18977] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1496.333155][T18977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.338702][T25860] CPU: 0 UID: 0 PID: 25860 Comm: syz.1.4768 Tainted: G L syzkaller #0 PREEMPT(full) [ 1496.338727][T25860] Tainted: [L]=SOFTLOCKUP [ 1496.338734][T25860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1496.338744][T25860] Call Trace: [ 1496.338751][T25860] [ 1496.338758][T25860] dump_stack_lvl+0xe8/0x150 [ 1496.338782][T25860] should_fail_ex+0x412/0x560 [ 1496.338807][T25860] should_failslab+0xa8/0x100 [ 1496.338832][T25860] __kmalloc_noprof+0xe8/0x760 [ 1496.338854][T25860] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1496.338875][T25860] ? sock_kmalloc+0xd6/0x160 [ 1496.338903][T25860] sock_kmalloc+0xd6/0x160 [ 1496.338925][T25860] alg_setkey+0x55/0x190 [ 1496.339077][T25860] ? alg_setsockopt+0x3c5/0x4a0 [ 1496.339098][T25860] alg_setsockopt+0x3da/0x4a0 [ 1496.339117][T25860] ? __pfx_alg_setsockopt+0x10/0x10 [ 1496.339137][T25860] do_sock_setsockopt+0x17c/0x1b0 [ 1496.339161][T25860] __x64_sys_setsockopt+0x13d/0x1b0 [ 1496.339182][T25860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.339199][T25860] do_syscall_64+0x15f/0xf80 [ 1496.339219][T25860] ? trace_irq_disable+0x3b/0x140 [ 1496.339241][T25860] ? clear_bhb_loop+0x40/0x90 [ 1496.339260][T25860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.339275][T25860] RIP: 0033:0x7f2ec5b9cdd9 [ 1496.339290][T25860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.339303][T25860] RSP: 002b:00007f2ec3df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1496.339320][T25860] RAX: ffffffffffffffda RBX: 00007f2ec5e15fa0 RCX: 00007f2ec5b9cdd9 [ 1496.339332][T25860] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 1496.339342][T25860] RBP: 00007f2ec3df6090 R08: 0000000000000021 R09: 0000000000000000 [ 1496.339352][T25860] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.339362][T25860] R13: 00007f2ec5e16038 R14: 00007f2ec5e15fa0 R15: 00007f2ec5f3fa48 [ 1496.339387][T25860] [ 1496.451914][T25862] tipc: Started in network mode [ 1496.458833][T18977] usb 3-1: Product: syz [ 1496.506715][T25862] tipc: Node identity 6eacaacf6c32, cluster identity 4711 [ 1496.577386][T25862] tipc: Enabled bearer , priority 0 [ 1496.594266][T18977] usb 3-1: Manufacturer: syz [ 1496.603097][T25863] syzkaller0: entered promiscuous mode [ 1496.611219][T18977] usb 3-1: SerialNumber: syz [ 1496.620276][T25863] syzkaller0: entered allmulticast mode [ 1496.628530][T18977] usb 3-1: config 0 descriptor?? [ 1496.651239][T25842] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1496.682636][T18977] usb 3-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1496.730606][T18977] usb 3-1: couldn't find an output bulk endpoint. Bailing out. [ 1496.738649][T25870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4770'. [ 1496.753383][ T5639] Bluetooth: hci5: command 0x0406 tx timeout [ 1496.996863][ T5697] usb 3-1: USB disconnect, device number 80 [ 1497.022470][T25861] tipc: Resetting bearer [ 1497.098051][T25861] tipc: Disabling bearer [ 1497.209057][T18977] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1497.365434][T18977] usb 6-1: Using ep0 maxpacket: 16 [ 1497.380743][T18977] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 1497.397159][T18977] usb 6-1: config 252 has no interface number 0 [ 1497.412687][T18977] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1497.431298][T18977] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1497.441327][T18977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.461946][T18977] usb 6-1: Product: syz [ 1497.473694][T18977] usb 6-1: Manufacturer: syz [ 1497.481171][T18977] usb 6-1: SerialNumber: syz [ 1497.512144][T18977] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1497.736347][T25877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.754967][T25877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.797043][T25877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4772'. [ 1498.082445][T18977] usb 6-1: USB disconnect, device number 36 [ 1498.091104][T24693] usb 6-1: Failed to submit usb control message: -71 [ 1498.121849][T24693] usb 6-1: unable to send the bmi data to the device: -71 [ 1498.141781][ T5697] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1498.151780][T24693] usb 6-1: unable to get target info from device [ 1498.170500][T24693] usb 6-1: could not get target info (-71) [ 1498.195446][T24693] usb 6-1: could not probe fw (-71) [ 1498.325672][T24335] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1498.340173][ T5697] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1498.367568][ T5697] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1498.395549][ T5697] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1498.414643][ T5697] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1498.432507][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.451466][ T5697] usb 3-1: Product: syz [ 1498.459686][ T5697] usb 3-1: Manufacturer: syz [ 1498.469813][ T5697] usb 3-1: SerialNumber: syz [ 1498.487489][T25892] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1498.500364][T25892] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1498.514446][T24335] usb 5-1: Using ep0 maxpacket: 8 [ 1498.530649][T24335] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1498.551321][T24335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.572877][T24335] usb 5-1: Product: syz [ 1498.587444][T24335] usb 5-1: Manufacturer: syz [ 1498.601166][T24335] usb 5-1: SerialNumber: syz [ 1498.627263][T24335] usb 5-1: config 0 descriptor?? [ 1498.736861][T25897] FAULT_INJECTION: forcing a failure. [ 1498.736861][T25897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1498.801263][T25897] CPU: 1 UID: 0 PID: 25897 Comm: syz.5.4779 Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.801299][T25897] Tainted: [L]=SOFTLOCKUP [ 1498.801305][T25897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1498.801315][T25897] Call Trace: [ 1498.801322][T25897] [ 1498.801330][T25897] dump_stack_lvl+0xe8/0x150 [ 1498.801355][T25897] should_fail_ex+0x412/0x560 [ 1498.801381][T25897] _copy_from_user+0x2d/0xb0 [ 1498.801404][T25897] __sys_bind+0x1c6/0x410 [ 1498.801426][T25897] ? __pfx___sys_bind+0x10/0x10 [ 1498.801455][T25897] ? __pfx_ksys_write+0x10/0x10 [ 1498.801483][T25897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.801501][T25897] __x64_sys_bind+0x7a/0x90 [ 1498.801520][T25897] do_syscall_64+0x15f/0xf80 [ 1498.801540][T25897] ? trace_irq_disable+0x3b/0x140 [ 1498.801564][T25897] ? clear_bhb_loop+0x40/0x90 [ 1498.801584][T25897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.801600][T25897] RIP: 0033:0x7f49f599cdd9 [ 1498.801616][T25897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.801631][T25897] RSP: 002b:00007f49f3bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1498.801649][T25897] RAX: ffffffffffffffda RBX: 00007f49f5c15fa0 RCX: 00007f49f599cdd9 [ 1498.801662][T25897] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 1498.801673][T25897] RBP: 00007f49f3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1498.801683][T25897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1498.801694][T25897] R13: 00007f49f5c16038 R14: 00007f49f5c15fa0 R15: 00007f49f5d3fa48 [ 1498.801721][T25897] [ 1499.010666][T24335] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 1499.051940][T24335] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1499.124715][T24335] usb 5-1: USB disconnect, device number 70 [ 1499.159915][T24696] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1499.192367][T25903] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1499.335732][T22273] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1499.495776][T22273] usb 6-1: Using ep0 maxpacket: 16 [ 1499.503137][T22273] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 1499.526202][T22273] usb 6-1: config 252 has no interface number 0 [ 1499.550028][T22273] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1499.610292][T22273] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1499.627239][ T5697] (unnamed net_device) (uninitialized): Assigned a random MAC address: 0a:74:f3:36:51:33 [ 1499.637989][T22273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.655283][T22273] usb 6-1: Product: syz [ 1499.670027][T22273] usb 6-1: Manufacturer: syz [ 1499.678061][ T5697] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 1499.692239][T22273] usb 6-1: SerialNumber: syz [ 1499.742114][T22273] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1499.834544][T22273] usb 3-1: USB disconnect, device number 81 [ 1499.845415][T22380] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1499.929678][T25901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.963268][T25901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.001577][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4781'. [ 1500.015577][T22380] usb 5-1: Using ep0 maxpacket: 16 [ 1500.032140][T22380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.055657][T22380] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1500.083532][T22380] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1500.106373][T22380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.106649][T22263] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1500.132496][T22380] usb 5-1: config 0 descriptor?? [ 1500.149910][ T5697] usb 6-1: USB disconnect, device number 37 [ 1500.156397][T24693] usb 6-1: Failed to submit usb control message: -71 [ 1500.176936][T24693] usb 6-1: unable to send the bmi data to the device: -71 [ 1500.199414][T24693] usb 6-1: unable to get target info from device [ 1500.209513][T24693] usb 6-1: could not get target info (-71) [ 1500.223509][T24693] usb 6-1: could not probe fw (-71) [ 1500.343009][T22263] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1500.378813][T22263] usb 2-1: config 13 has an invalid interface number: 147 but max is 0 [ 1500.401851][T22263] usb 2-1: config 13 has no interface number 0 [ 1500.420344][T22263] usb 2-1: config 13 interface 147 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1500.459470][T22263] usb 2-1: config 13 interface 147 altsetting 2 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 1500.486386][T22263] usb 2-1: config 13 interface 147 altsetting 2 endpoint 0x85 has invalid maxpacket 19262, setting to 64 [ 1500.516246][T22263] usb 2-1: config 13 interface 147 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1500.545404][T22263] usb 2-1: config 13 interface 147 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 8 [ 1500.565410][T22263] usb 2-1: config 13 interface 147 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1500.583453][T22380] microsoft 0003:045E:07DA.0021: ignoring exceeding usage max [ 1500.591421][T22263] usb 2-1: config 13 interface 147 has no altsetting 0 [ 1500.593606][T22263] usb 2-1: New USB device found, idVendor=093b, idProduct=a003, bcdDevice=ee.49 [ 1500.641177][T22263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.647435][T22380] hid_map_usage: 23542 callbacks suppressed [ 1500.647451][T22380] HID 045e:07da: Invalid code 65791 type 1 [ 1500.664154][T22263] usb 2-1: Product: syz [ 1500.688779][T22380] HID 045e:07da: Invalid code 768 type 1 [ 1500.690818][T22263] usb 2-1: Manufacturer: syz [ 1500.708820][T22380] HID 045e:07da: Invalid code 769 type 1 [ 1500.723581][T22380] HID 045e:07da: Invalid code 770 type 1 [ 1500.732417][T22263] usb 2-1: SerialNumber: syz [ 1500.738519][T22380] HID 045e:07da: Invalid code 771 type 1 [ 1500.768242][T25929] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1500.778215][T22380] HID 045e:07da: Invalid code 772 type 1 [ 1500.784032][T25920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.803659][T22380] HID 045e:07da: Invalid code 773 type 1 [ 1500.819684][T25920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.835093][T22380] HID 045e:07da: Invalid code 774 type 1 [ 1500.861317][T22380] HID 045e:07da: Invalid code 775 type 1 [ 1500.889682][T22380] HID 045e:07da: Invalid code 776 type 1 [ 1500.908001][T25953] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1500.949343][T25956] netlink: 'syz.2.4795': attribute type 5 has an invalid length. [ 1500.990100][T22380] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0021/input/input24 [ 1501.052897][T22263] usb 2-1: USB disconnect, device number 84 [ 1501.154462][T22380] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1501.208993][T22380] usb 5-1: USB disconnect, device number 71 [ 1501.375758][T25967] fido_id[25967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1502.205945][T25996] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1502.213151][T25996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1502.276923][T25996] vhci_hcd vhci_hcd.0: Device attached [ 1502.320852][T26003] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1502.359866][T26008] FAULT_INJECTION: forcing a failure. [ 1502.359866][T26008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.375665][T26008] CPU: 1 UID: 0 PID: 26008 Comm: syz.1.4808 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.375697][T26008] Tainted: [L]=SOFTLOCKUP [ 1502.375703][T26008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1502.375717][T26008] Call Trace: [ 1502.375725][T26008] [ 1502.375733][T26008] dump_stack_lvl+0xe8/0x150 [ 1502.375759][T26008] should_fail_ex+0x412/0x560 [ 1502.375785][T26008] _copy_from_iter+0x1d3/0x1670 [ 1502.375808][T26008] ? rcu_is_watching+0x15/0xb0 [ 1502.375842][T26008] ? __pfx__copy_from_iter+0x10/0x10 [ 1502.375870][T26008] ? netlink_sendmsg+0x650/0xb40 [ 1502.375891][T26008] ? skb_put+0x11b/0x210 [ 1502.375923][T26008] netlink_sendmsg+0x6c0/0xb40 [ 1502.375951][T26008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1502.375975][T26008] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1502.375998][T26008] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1502.376024][T26008] ____sys_sendmsg+0x972/0x9f0 [ 1502.376045][T26008] ? __might_fault+0xaf/0x130 [ 1502.376071][T26008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1502.376101][T26008] ? import_iovec+0x73/0xa0 [ 1502.376126][T26008] ___sys_sendmsg+0x2a5/0x360 [ 1502.376145][T26008] ? __lock_acquire+0x6b5/0x2cf0 [ 1502.376167][T26008] ? __pfx____sys_sendmsg+0x10/0x10 [ 1502.376221][T26008] ? __fget_files+0x2a/0x420 [ 1502.376239][T26008] ? __fget_files+0x3a0/0x420 [ 1502.376265][T26008] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1502.376288][T26008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1502.376316][T26008] ? __pfx_ksys_write+0x10/0x10 [ 1502.376346][T26008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.376365][T26008] do_syscall_64+0x15f/0xf80 [ 1502.376385][T26008] ? trace_irq_disable+0x3b/0x140 [ 1502.376408][T26008] ? clear_bhb_loop+0x40/0x90 [ 1502.376429][T26008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.376445][T26008] RIP: 0033:0x7f2ec5b9cdd9 [ 1502.376462][T26008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.376476][T26008] RSP: 002b:00007f2ec3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1502.376495][T26008] RAX: ffffffffffffffda RBX: 00007f2ec5e15fa0 RCX: 00007f2ec5b9cdd9 [ 1502.376507][T26008] RDX: 0000000004008800 RSI: 0000200000000840 RDI: 0000000000000003 [ 1502.376518][T26008] RBP: 00007f2ec3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.376529][T26008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.376539][T26008] R13: 00007f2ec5e16038 R14: 00007f2ec5e15fa0 R15: 00007f2ec5f3fa48 [ 1502.376567][T26008] [ 1502.632983][T21948] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1502.666604][T26010] loop2: detected capacity change from 0 to 7 [ 1502.695451][T21948] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1502.706392][T25997] vhci_hcd: connection closed [ 1502.712484][ T115] vhci_hcd vhci_hcd.2: stop threads [ 1502.715652][T26010] Dev loop2: unable to read RDB block 7 [ 1502.728121][T26010] loop2: AHDI p2 p3 [ 1502.732050][T26010] loop2: partition table partially beyond EOD, truncated [ 1502.823186][ T115] vhci_hcd vhci_hcd.2: release socket [ 1502.856278][ T115] vhci_hcd vhci_hcd.2: disconnect device [ 1503.245714][T18977] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1503.275441][T22380] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1503.406928][T18977] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1503.415696][T18977] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1503.431091][T22380] usb 2-1: Using ep0 maxpacket: 32 [ 1503.455806][T22380] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1503.470425][T18977] usb 6-1: config 150 has no interface number 0 [ 1503.494342][T22380] usb 2-1: config 0 has no interface number 0 [ 1503.504809][T18977] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1503.519423][T22380] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1503.542180][T18977] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1503.557247][T22380] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1503.570476][T18977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.588559][T18977] usb 6-1: Product: syz [ 1503.594320][T22380] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1503.610550][T18977] usb 6-1: Manufacturer: syz [ 1503.620702][T18977] usb 6-1: SerialNumber: syz [ 1503.639307][T22380] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1503.684008][T22380] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1503.737706][T22380] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1503.762396][T22380] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1503.788250][T22380] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1503.811656][T22380] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1503.868398][T22380] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1503.904862][T18977] xr_serial 6-1:150.204: skipping garbage [ 1503.914008][T22380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.938362][T18977] xr_serial 6-1:150.204: xr_serial converter detected [ 1503.954752][T22380] usb 2-1: Product: syz [ 1503.970503][T22380] usb 2-1: Manufacturer: syz [ 1503.989494][T22380] usb 2-1: SerialNumber: syz [ 1504.010701][T22380] usb 2-1: config 0 descriptor?? [ 1504.024549][T26020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1504.046968][T22380] usb 2-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1504.076043][T22380] usb 2-1: couldn't find an output bulk endpoint. Bailing out. [ 1504.439194][T22380] usb 2-1: USB disconnect, device number 85 [ 1504.604175][T26035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4817'. [ 1504.714804][T18977] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1504.739084][T18977] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1504.794235][T18977] usb 6-1: USB disconnect, device number 38 [ 1504.836029][T18977] xr_serial 6-1:150.204: device disconnected [ 1505.306899][T22273] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1505.354345][T26047] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1505.460616][T26049] syzkaller0: entered promiscuous mode [ 1505.478897][T26049] syzkaller0: entered allmulticast mode [ 1505.493823][T22273] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1505.508777][T22273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.517663][T22273] usb 2-1: Product: syz [ 1505.522128][T22273] usb 2-1: Manufacturer: syz [ 1505.531946][T22273] usb 2-1: SerialNumber: syz [ 1505.551935][T22273] usb 2-1: config 0 descriptor?? [ 1505.572109][T22273] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1505.805741][T18977] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1505.967052][T18977] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1505.985447][T22380] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1505.993781][T18977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1506.023992][T18977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1506.044223][T18977] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1506.071254][T18977] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1506.093531][T18977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.118657][T18977] usb 6-1: config 0 descriptor?? [ 1506.145516][T22380] usb 5-1: device descriptor read/64, error -71 [ 1506.276875][ T30] kauditd_printk_skb: 635 callbacks suppressed [ 1506.276889][ T30] audit: type=1326 audit(1777776371.613:34459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.1.4821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec5b9cdd9 code=0x7ffc0000 [ 1506.317964][ T30] audit: type=1326 audit(1777776371.643:34460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.1.4821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec5b9cdd9 code=0x7ffc0000 [ 1506.358284][ T30] audit: type=1326 audit(1777776371.643:34461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.1.4821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2ec5b9cdd9 code=0x7ffc0000 [ 1506.385436][ T30] audit: type=1326 audit(1777776371.643:34462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.1.4821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec5b9cdd9 code=0x7ffc0000 [ 1506.410269][T22380] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1506.426027][ T30] audit: type=1326 audit(1777776371.643:34463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.1.4821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ec5b5d60e code=0x7ffc0000 [ 1506.452632][ T30] audit: type=1326 audit(1777776371.643:34464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.1.4821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec5b9cdd9 code=0x7ffc0000 [ 1506.517239][ T30] audit: type=1326 audit(1777776371.643:34465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.1.4821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2ec5b9cdd9 code=0x7ffc0000 [ 1506.560176][T22380] usb 5-1: device descriptor read/64, error -71 [ 1506.572774][T18977] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1506.601847][T22273] gspca_stk1135: reg_w 0x3 err -110 [ 1506.607584][ T30] audit: type=1326 audit(1777776371.643:34466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.1.4821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec5b9cdd9 code=0x7ffc0000 [ 1506.607629][ T30] audit: type=1326 audit(1777776371.643:34467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.1.4821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ec5b9cdd9 code=0x7ffc0000 [ 1506.607664][ T30] audit: type=1326 audit(1777776371.643:34468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.1.4821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec5b9cdd9 code=0x7ffc0000 [ 1506.706150][T22380] usb usb5-port1: attempt power cycle [ 1506.773266][T22273] gspca_stk1135: serial bus timeout: status=0x00 [ 1506.800013][T22273] gspca_stk1135: Sensor write failed [ 1506.812646][T22273] gspca_stk1135: serial bus timeout: status=0x00 [ 1506.819628][T22273] gspca_stk1135: Sensor write failed [ 1506.825098][T22273] gspca_stk1135: serial bus timeout: status=0x00 [ 1506.832573][T22273] gspca_stk1135: Sensor read failed [ 1506.841828][T22273] gspca_stk1135: serial bus timeout: status=0x00 [ 1506.856138][T18977] usb 6-1: USB disconnect, device number 39 [ 1506.875868][T22273] gspca_stk1135: Sensor read failed [ 1506.890267][T22273] gspca_stk1135: Detected sensor type unknown (0x0) [ 1506.909823][T22273] gspca_stk1135: serial bus timeout: status=0x00 [ 1506.933869][T22273] gspca_stk1135: Sensor read failed [ 1506.944779][T22273] gspca_stk1135: serial bus timeout: status=0x00 [ 1506.958314][T22273] gspca_stk1135: Sensor read failed [ 1506.964043][T22273] gspca_stk1135: serial bus timeout: status=0x00 [ 1506.989575][T22273] gspca_stk1135: Sensor write failed [ 1507.001824][T22273] gspca_stk1135: serial bus timeout: status=0x00 [ 1507.018613][T22273] gspca_stk1135: Sensor write failed [ 1507.041786][T22273] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1507.065495][T22380] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1507.086897][T22380] usb 5-1: device descriptor read/8, error -71 [ 1507.251140][T26071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4830'. [ 1507.337184][T22380] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1507.365941][T22380] usb 5-1: device descriptor read/8, error -71 [ 1507.478155][T22380] usb usb5-port1: unable to enumerate USB device [ 1507.508007][T26077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1507.652471][T26077] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1507.776048][T21948] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1508.094096][T22273] usb 2-1: USB disconnect, device number 86 [ 1508.147572][T26091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4837'. [ 1508.825725][T22263] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1508.945750][T21948] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1508.997456][T22263] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1509.018447][T22263] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1509.051741][T22263] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1509.081686][T22263] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1509.092536][T26120] EXT4-fs: Conflicting test_dummy_encryption options [ 1509.099350][T22263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.108609][T22263] usb 2-1: Product: syz [ 1509.126936][T21948] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1509.152779][T22263] usb 2-1: Manufacturer: syz [ 1509.170408][T22263] usb 2-1: SerialNumber: syz [ 1509.179021][T21948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1509.212861][T26107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1509.234363][T21948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1509.247183][T26107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1509.263884][T21948] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1509.314220][T21948] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1509.348633][T21948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.394862][T21948] usb 3-1: config 0 descriptor?? [ 1509.898068][T21948] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1510.058095][T22380] usb 3-1: USB disconnect, device number 82 [ 1510.150724][T26134] netlink: 'syz.4.4854': attribute type 1 has an invalid length. [ 1510.233987][T26132] fido_id[26132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1510.264732][T26137] binder: 26133:26137 ioctl 89f0 2000000002c0 returned -22 [ 1510.340562][T22263] (unnamed net_device) (uninitialized): Assigned a random MAC address: fe:ab:14:b2:81:0b [ 1510.413381][T26135] bond2: (slave geneve2): making interface the new active one [ 1510.443946][T26134] binder: 26133:26134 ioctl c0306201 200000000040 returned -22 [ 1510.452744][T26135] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1510.466105][T26134] fuse: Unknown parameter '0x00000000000000060xffffffffffffffff' [ 1510.536595][T22263] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 1510.549443][T13836] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1510.583679][T22263] usb 2-1: USB disconnect, device number 87 [ 1510.593095][T13836] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1510.637236][T13836] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1510.786305][T13836] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1510.985295][T26147] netlink: 'syz.3.4858': attribute type 21 has an invalid length. [ 1511.068304][T22380] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1511.205985][T22380] usb 5-1: device descriptor read/64, error -71 [ 1511.229571][T26154] xt_hashlimit: size too large, truncated to 1048576 [ 1511.477392][T22380] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1511.504043][T26168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4865'. [ 1511.647999][T22380] usb 5-1: device descriptor read/64, error -71 [ 1511.720773][T26175] EXT4-fs: Conflicting test_dummy_encryption options [ 1511.777307][T22380] usb usb5-port1: attempt power cycle [ 1511.863225][T26180] FAULT_INJECTION: forcing a failure. [ 1511.863225][T26180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1511.930297][T26180] CPU: 0 UID: 0 PID: 26180 Comm: syz.3.4870 Tainted: G L syzkaller #0 PREEMPT(full) [ 1511.930325][T26180] Tainted: [L]=SOFTLOCKUP [ 1511.930331][T26180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1511.930342][T26180] Call Trace: [ 1511.930349][T26180] [ 1511.930357][T26180] dump_stack_lvl+0xe8/0x150 [ 1511.930383][T26180] should_fail_ex+0x412/0x560 [ 1511.930409][T26180] _copy_from_user+0x2d/0xb0 [ 1511.930433][T26180] ___sys_sendmsg+0x1c6/0x360 [ 1511.930455][T26180] ? __lock_acquire+0x6b5/0x2cf0 [ 1511.930478][T26180] ? __pfx____sys_sendmsg+0x10/0x10 [ 1511.930504][T26180] ? kstrtouint+0x6e/0xe0 [ 1511.930546][T26180] ? __fget_files+0x2a/0x420 [ 1511.930565][T26180] ? __fget_files+0x3a0/0x420 [ 1511.930593][T26180] __sys_sendmmsg+0x27c/0x4e0 [ 1511.930620][T26180] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1511.930639][T26180] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1511.930684][T26180] ? ksys_write+0x242/0x270 [ 1511.930708][T26180] ? __pfx_ksys_write+0x10/0x10 [ 1511.930736][T26180] __x64_sys_sendmmsg+0xa0/0xc0 [ 1511.930757][T26180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.930775][T26180] do_syscall_64+0x15f/0xf80 [ 1511.930794][T26180] ? trace_irq_disable+0x3b/0x140 [ 1511.930817][T26180] ? clear_bhb_loop+0x40/0x90 [ 1511.930837][T26180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.930853][T26180] RIP: 0033:0x7fb4e3b9cdd9 [ 1511.930869][T26180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.930894][T26180] RSP: 002b:00007fb4e4a21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1511.930913][T26180] RAX: ffffffffffffffda RBX: 00007fb4e3e15fa0 RCX: 00007fb4e3b9cdd9 [ 1511.930925][T26180] RDX: 0000000000000003 RSI: 0000200000001700 RDI: 0000000000000003 [ 1511.930935][T26180] RBP: 00007fb4e4a21090 R08: 0000000000000000 R09: 0000000000000000 [ 1511.930946][T26180] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.930956][T26180] R13: 00007fb4e3e16038 R14: 00007fb4e3e15fa0 R15: 00007fb4e3f3fa48 [ 1511.930984][T26180] [ 1512.195434][T22380] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1512.398555][T22380] usb 5-1: device descriptor read/8, error -71 [ 1512.676579][T22380] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1512.732843][T22380] usb 5-1: device descriptor read/8, error -71 [ 1512.845816][T22380] usb usb5-port1: unable to enumerate USB device [ 1513.105721][ T5697] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1513.260456][ T5697] usb 3-1: device descriptor read/64, error -71 [ 1513.515753][ T5697] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1513.675709][ T5697] usb 3-1: device descriptor read/64, error -71 [ 1513.786862][ T5697] usb usb3-port1: attempt power cycle [ 1514.146059][ T5697] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1514.187045][ T5697] usb 3-1: device descriptor read/8, error -71 [ 1514.225519][T22263] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1514.407496][T22263] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1514.433634][T22263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1514.451161][ T5697] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1514.468777][T22263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1514.494329][T22263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1514.509909][ T5697] usb 3-1: device descriptor read/8, error -71 [ 1514.528983][T22263] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1514.549503][T22263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.565638][T24335] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1514.580714][T22263] usb 5-1: config 0 descriptor?? [ 1514.625987][ T5697] usb usb3-port1: unable to enumerate USB device [ 1514.735783][T24335] usb 2-1: Using ep0 maxpacket: 16 [ 1514.747536][T24335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.765990][T24335] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1514.775237][T24335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.786875][T24335] usb 2-1: config 0 descriptor?? [ 1515.026523][T22263] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1515.206894][T22263] usb 5-1: USB disconnect, device number 80 [ 1515.229960][ T5697] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1515.249624][T24335] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 1515.269097][T24335] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 1515.281300][T24335] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 1515.290475][T24335] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 1515.299278][T24335] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1515.405803][ T5697] usb 6-1: Using ep0 maxpacket: 8 [ 1515.416867][ T5697] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1515.432099][ C0] usb 2-1: input irq status -75 received [ 1515.439858][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.448650][ T5697] usb 6-1: Product: syz [ 1515.453134][ T5697] usb 6-1: Manufacturer: syz [ 1515.458123][ T5697] usb 6-1: SerialNumber: syz [ 1515.467366][ T5697] usb 6-1: config 0 descriptor?? [ 1515.633425][T22263] usb 2-1: USB disconnect, device number 88 [ 1515.688730][ T5697] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1516.359227][T26230] EXT4-fs: Conflicting test_dummy_encryption options [ 1516.511330][ T5697] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1516.559681][ T5697] usb 6-1: USB disconnect, device number 40 [ 1516.749537][T21948] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1516.895476][T21948] usb 2-1: device descriptor read/64, error -71 [ 1517.146011][T21948] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1517.265478][T22380] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1517.296032][T21948] usb 2-1: device descriptor read/64, error -71 [ 1517.345463][T18977] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1517.419052][T21948] usb usb2-port1: attempt power cycle [ 1517.436874][T22380] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1517.460963][T22380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.492207][T22380] usb 5-1: config 0 descriptor?? [ 1517.515216][T22380] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1517.529291][T18977] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1517.543271][T18977] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1517.557831][T18977] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1517.568872][T18977] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1517.581528][T18977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.590361][T18977] usb 6-1: Product: syz [ 1517.594629][T18977] usb 6-1: Manufacturer: syz [ 1517.607129][T18977] usb 6-1: SerialNumber: syz [ 1517.628171][T26241] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1517.641232][T26241] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1517.707239][ T31] INFO: task kworker/0:0:11716 blocked for more than 143 seconds. [ 1517.715150][ T31] Tainted: G L syzkaller #0 [ 1517.725688][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.744672][ T31] task:kworker/0:0 state:D stack:21192 pid:11716 tgid:11716 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1517.757247][ T31] Workqueue: usb_hub_wq hub_event [ 1517.763558][ T31] Call Trace: [ 1517.768216][ T31] [ 1517.771341][ T31] __schedule+0x17b4/0x5680 [ 1517.777688][ T31] ? __pfx___schedule+0x10/0x10 [ 1517.783844][ T31] ? schedule+0x90/0x360 [ 1517.795564][T21948] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1517.803379][ T31] schedule+0x164/0x360 [ 1517.818279][ T31] schedule_timeout+0xc3/0x2c0 [ 1517.829875][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1517.845235][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1517.852909][T21948] usb 2-1: device descriptor read/8, error -71 [ 1517.863486][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1517.880762][ T31] ? wait_for_completion+0x274/0x5e0 [ 1517.892605][ T31] wait_for_completion+0x2cc/0x5e0 [ 1517.903832][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1517.920854][ T31] i2c_del_adapter+0x5c0/0x790 [ 1517.933368][ T31] ? __pfx___up_read+0x10/0x10 [ 1517.944996][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1517.956115][ T31] ? __pfx_ft260_remove+0x10/0x10 [ 1517.968901][ T31] ? sysfs_remove_group+0x23d/0x2e0 [ 1517.981339][ T31] ? __pfx_ft260_remove+0x10/0x10 [ 1517.992265][ T31] ft260_remove+0x5d/0x80 [ 1518.002434][ T31] hid_device_remove+0x228/0x370 [ 1518.013361][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 1518.027622][ T31] device_release_driver_internal+0x46f/0x870 [ 1518.042878][ T31] bus_remove_device+0x455/0x570 [ 1518.054008][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1518.066547][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1518.080383][ T31] device_del+0x527/0x8f0 [ 1518.095001][ T31] ? __pfx_device_del+0x10/0x10 [ 1518.105839][T21948] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1518.115217][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1518.138153][ T31] hid_destroy_device+0x6b/0x1b0 [ 1518.155150][ T31] usbhid_disconnect+0x9f/0xc0 [ 1518.165152][T21948] usb 2-1: device descriptor read/8, error -71 [ 1518.176490][ T31] usb_unbind_interface+0x26e/0x910 [ 1518.194258][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1518.202790][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1518.208868][ T31] device_release_driver_internal+0x4d9/0x870 [ 1518.221171][ T31] bus_remove_device+0x455/0x570 [ 1518.229403][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1518.235017][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1518.241526][ T31] device_del+0x527/0x8f0 [ 1518.248738][ T31] ? __pfx_device_del+0x10/0x10 [ 1518.253797][ T31] ? kobject_put+0x51d/0x560 [ 1518.260147][ T31] usb_disable_device+0x3d4/0x8d0 [ 1518.265698][ T31] usb_disconnect+0x32f/0x990 [ 1518.270500][ T31] hub_event+0x1cc9/0x4f30 [ 1518.275075][ T31] ? __pfx_hub_event+0x10/0x10 [ 1518.280559][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1518.285989][T21948] usb usb2-port1: unable to enumerate USB device [ 1518.286946][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1518.299392][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1518.305680][ T31] process_scheduled_works+0xb5d/0x1860 [ 1518.311482][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1518.318224][ T31] ? assign_work+0x3d5/0x5e0 [ 1518.323056][ T31] worker_thread+0xa53/0xfc0 [ 1518.328278][ T31] kthread+0x388/0x470 [ 1518.332458][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1518.338100][ T31] ? __pfx_kthread+0x10/0x10 [ 1518.342823][ T31] ret_from_fork+0x514/0xb70 [ 1518.349370][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1518.354595][ T31] ? __switch_to+0xc79/0x1410 [ 1518.363594][ T31] ? __pfx_kthread+0x10/0x10 [ 1518.369534][ T31] ret_from_fork_asm+0x1a/0x30 [ 1518.374534][ T31] [ 1518.378429][ T31] [ 1518.378429][ T31] Showing all locks held in the system: [ 1518.386698][ T31] 1 lock held by khungtaskd/31: [ 1518.392138][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1518.403256][ T31] 2 locks held by getty/5385: [ 1518.412972][ T31] #0: ffff888036e660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1518.423401][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1518.434495][ T31] 4 locks held by udevd/5806: [ 1518.439935][ T31] #0: ffff88803bf013f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1518.449167][ T31] #1: ffff8880598f0480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1518.460266][ T31] #2: ffff88804341d0f8 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1518.473437][ T31] #3: ffff88802c2951d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1518.485099][ T31] 6 locks held by kworker/0:0/11716: [ 1518.490755][ T31] #0: ffff88801e697140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1518.502876][ T31] #1: ffffc9000e07fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1518.519278][ T31] #2: ffff88802b01c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1518.528963][ T31] #3: ffff8880a20281d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 1518.538510][ T31] #4: ffff888025a321a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1518.549669][ T31] #5: ffff888035d6da58 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1518.562166][ T31] 5 locks held by kworker/1:2/18977: [ 1518.567787][ T31] #0: ffff88801e697140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1518.582429][ T31] #1: ffffc90003ab7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1518.597333][ T31] #2: ffff88802b0de1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1518.606719][ T31] #3: ffff88802c2951d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1518.616628][ T31] #4: ffff88802af341a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1518.626815][ T31] 5 locks held by kworker/1:4/22380: [ 1518.632202][ T31] #0: ffff88801e697140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1518.644142][ T31] #1: ffffc9000d797c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1518.658025][ T31] #2: ffff88802affe1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1518.668266][ T31] #3: ffff8880351191d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1518.677589][T18977] (unnamed net_device) (uninitialized): Assigned a random MAC address: 12:ab:b0:f3:f5:30 [ 1518.690726][ T31] #4: ffff88807d0b11a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1518.700283][ T31] 3 locks held by syz.0.3978/23442: [ 1518.706564][ T31] [ 1518.707550][T18977] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 1518.709319][ T31] ============================================= [ 1518.709319][ T31] [ 1518.723952][ T31] NMI backtrace for cpu 0 [ 1518.723970][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1518.723992][ T31] Tainted: [L]=SOFTLOCKUP [ 1518.723998][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1518.724008][ T31] Call Trace: [ 1518.724016][ T31] [ 1518.724023][ T31] dump_stack_lvl+0xe8/0x150 [ 1518.724048][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1518.724075][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1518.724096][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1518.724122][ T31] sys_info+0x135/0x170 [ 1518.724228][ T31] watchdog+0xfd3/0x1030 [ 1518.724258][ T31] ? watchdog+0x1c9/0x1030 [ 1518.724285][ T31] kthread+0x388/0x470 [ 1518.724306][ T31] ? __pfx_watchdog+0x10/0x10 [ 1518.724326][ T31] ? __pfx_kthread+0x10/0x10 [ 1518.724347][ T31] ret_from_fork+0x514/0xb70 [ 1518.724367][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1518.724385][ T31] ? __switch_to+0xc79/0x1410 [ 1518.724409][ T31] ? __pfx_kthread+0x10/0x10 [ 1518.724430][ T31] ret_from_fork_asm+0x1a/0x30 [ 1518.724463][ T31] [ 1518.724469][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1518.842306][ C1] NMI backtrace for cpu 1 [ 1518.842324][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1518.842346][ C1] Tainted: [L]=SOFTLOCKUP [ 1518.842355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1518.842366][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1518.842394][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 c0 c6 35 0a cc 89 f6 31 d2 e9 b6 4b 7a 03 66 0f 1f 44 00 [ 1518.842409][ C1] RSP: 0018:ffffc90000197c10 EFLAGS: 00000046 [ 1518.842423][ C1] RAX: 0000000000000d84 RBX: ffff8880b8723e40 RCX: 0000000000000838 [ 1518.842435][ C1] RDX: 0000000000000000 RSI: 0000000000000d84 RDI: 0000000000000838 [ 1518.842445][ C1] RBP: ffffc90000197cc8 R08: ffffffff81b2cf25 R09: ffffffff9a48a588 [ 1518.842461][ C1] R10: 0000000000000003 R11: ffffffff817436c0 R12: 0000000000000d84 [ 1518.842472][ C1] R13: dffffc0000000000 R14: 0000000010006b5f R15: 0000000000000020 [ 1518.842483][ C1] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 1518.842496][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1518.842507][ C1] CR2: 0000200000004280 CR3: 000000007f826000 CR4: 00000000003526f0 [ 1518.842521][ C1] Call Trace: [ 1518.842529][ C1] [ 1518.842535][ C1] lapic_next_event+0x11/0x20 [ 1518.842554][ C1] clockevents_program_event+0x385/0x630 [ 1518.842578][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1518.842600][ C1] ? tick_program_event+0x8f/0x120 [ 1518.842624][ C1] __hrtimer_rearm_deferred+0x270/0x450 [ 1518.842646][ C1] irqentry_exit+0x67d/0x730 [ 1518.842667][ C1] ? trace_irq_disable+0x3b/0x140 [ 1518.842692][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1518.842709][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1518.842728][ C1] Code: 1b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 31 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1518.842743][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1518.842755][ C1] RAX: 0000000001d59349 RBX: ffffffff819a814a RCX: 0000000080000001 [ 1518.842766][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa5add RDI: ffffffff8c28ac60 [ 1518.842777][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1518.842789][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1518.842800][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 1518.842813][ C1] ? do_idle+0x36a/0x5f0 [ 1518.842836][ C1] default_idle+0x9/0x20 [ 1518.842856][ C1] default_idle_call+0x72/0xb0 [ 1518.842878][ C1] do_idle+0x36a/0x5f0 [ 1518.842898][ C1] ? __pfx_do_idle+0x10/0x10 [ 1518.842919][ C1] cpu_startup_entry+0x43/0x60 [ 1518.842937][ C1] start_secondary+0x101/0x110 [ 1518.842951][ C1] common_startup_64+0x13e/0x147 [ 1518.842980][ C1] [ 1518.900153][T18977] usb 6-1: USB disconnect, device number 41 [ 1518.993422][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1518.993449][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1518.993472][ T31] Tainted: [L]=SOFTLOCKUP [ 1518.993479][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1518.993489][ T31] Call Trace: [ 1518.993498][ T31] [ 1518.993506][ T31] vpanic+0x56c/0xa60 [ 1518.993530][ T31] ? __pfx___schedule+0x10/0x10 [ 1518.993552][ T31] ? __pfx_vpanic+0x10/0x10 [ 1518.993571][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1518.993601][ T31] panic+0xc5/0xd0 [ 1518.993618][ T31] ? __pfx_panic+0x10/0x10 [ 1518.993637][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1518.993663][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1518.993690][ T31] watchdog+0x102c/0x1030 [ 1518.993719][ T31] ? watchdog+0x1c9/0x1030 [ 1518.993745][ T31] kthread+0x388/0x470 [ 1518.993765][ T31] ? __pfx_watchdog+0x10/0x10 [ 1518.993784][ T31] ? __pfx_kthread+0x10/0x10 [ 1518.993805][ T31] ret_from_fork+0x514/0xb70 [ 1518.993825][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1518.993842][ T31] ? __switch_to+0xc79/0x1410 [ 1518.993866][ T31] ? __pfx_kthread+0x10/0x10 [ 1518.993888][ T31] ret_from_fork_asm+0x1a/0x30 [ 1518.993920][ T31] [ 1518.999038][ T31] Kernel Offset: disabled