last executing test programs: 8.109339159s ago: executing program 3 (id=1928): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f000000a380)=""/4108, 0x100c}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f0000002300)=""/187, 0xbb}], 0x3}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x81}], 0x4, 0x0, 0x0) 8.023595108s ago: executing program 3 (id=1930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d04070a0000000000010902"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 6.609090468s ago: executing program 2 (id=1940): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f000000a380)=""/4108, 0x100c}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f0000002300)=""/187, 0xbb}], 0x3}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x81}], 0x4, 0x0, 0x0) 6.539900335s ago: executing program 2 (id=1942): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x2, 0x70767c0c, 0x9, 0x2, 0x0, 0x81, 0xff, 0x6, 0x4], 0x0, 0x0) r1 = socket(0x10, 0x800, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x400}, {r1, 0x443}, {r0, 0x1000}, {r1, 0x8495}], 0x4, &(0x7f00000000c0)={r2, r3+60000000}, &(0x7f00000001c0)={[0x1, 0x6]}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="c000000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe78a04414967dee00000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="04000000"], 0xc0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x5db4, &(0x7f0000001140)={0x0, 0x3f0, 0x80, 0x2, 0x3de}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x2, 0x36, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 4.813242898s ago: executing program 3 (id=1948): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r2 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r2, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000440)={0x0, &(0x7f0000000140)=[{}, {}, {}], 0x0, 0x0, 0x3c3c3c3c3c3c533, 0x0, 0x1a, 0x0, r1}) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004a7"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x40, &(0x7f0000000180)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="8dab741dea04ba0da8"]) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 4.216548009s ago: executing program 4 (id=1954): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='devices.list\x00', 0x275a, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000380)="05b8de7a", 0x4}], 0x1, 0x0, 0x0, 0x20004011}, 0x20000000) write$cgroup_subtree(r0, 0x0, 0x32600) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}]}, &(0x7f0000000480)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x2}, 0x8) 3.469297097s ago: executing program 2 (id=1955): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="c71cf63e74e614d3014135c218620000080100000000000f762081008100000018000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r9, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r9, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r6, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r7, 0x8002}], 0x1, 0x0, 0x0, 0x0) r10 = dup2(r6, r7) fcntl$setown(r10, 0x8, r5) tkill(r5, 0x13) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.242750928s ago: executing program 4 (id=1956): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/cgroup\x00') r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) getpid() socket(0x400000000010, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4c020) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c01000010000100fefffffffddbdf2500000000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000101f00000000000000020000000000000002000000fcffffffbcffffff2abd7000000000000200010020000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000500)={0xc52, 0x2, 0x9, 0x6, 0x0, 0x10000, "5debca561a5fbf61048955f6f876b2ff", 0x9, 0x0, 0xfd}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 3.238732951s ago: executing program 0 (id=1957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x3, 0x300) epoll_create(0xd) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r1], 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="336f935b17eefa8012e0637ebd7af17278d20ff23a8302613b02419d13b46c3e66581853817519588011d23af76bc42d1fbeb74de5bed6051866a66a440c08b50c8265f60b3136c127fc683eb7c379147932f84377659a3e93be65f4b54fdec71e2d6061fc4b6131119fa641a6793edc00893ca7562655", 0xffffffffffffffad}], 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{}, '\x00', "0000000081ab47f63091d741ce6600", "b2901ee7", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x101800) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x8040) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000003c0)={r4, 0x1, {0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8000, 0x0, 0xa, 0x1c, 0x0, "eb46c9913789bfe684edd7179961b09b27b2dc80e2f97e87251f672b737779f23cebb99709d6e5518161aff173f72c5cd7623a1142105084d4629fbbdf26c4c1", "f9e4671e438c6cbd1b6298d4457db47896f1503e395031f517e630d896156ee79889fee3e750cd63616006510f96cfff13a9c916742611e73415a9cbf80a1e4d", "8484840ba3e676b4cb444f3bb72fba108439696f74d6062a4388e17ab1c858c0", [0x0, 0x7]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f00004e6000/0x1000)=nil, 0x1000, 0x2000004, 0x13, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 3.045573938s ago: executing program 3 (id=1958): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) openat$kvm(0xffffff9c, 0x0, 0x60840, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0x2, 0x10000, 0x5, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x40, 0x88, 0x100, 0x8, 0x80000001], 0x8080000, 0x240046}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x7fffffff}, @l2tp={0x2, 0x0, @loopback, 0x2000000}, @can={0x1d, r2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}) 2.972040605s ago: executing program 3 (id=1959): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1a4, 0x2a8, 0x2a8, 0x1a4, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0xffffffff, 'wg1\x00', 'dvmrp0\x00', {}, {}, 0x67, 0x2, 0x1}, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x9}}, @common=@addrtype={{0x2c}, {0x0, 0x1, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@rand_addr=0x64010100, @empty, 0xffffffff, 0xffffffff, 'veth0_to_batadv\x00', 'netdevsim0\x00', {}, {}, 0x33}, 0x0, 0x9c, 0xc4, 0x0, {}, [@common=@ah={{0x2c}, {[0x7, 0x4], 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0xffffffffffffffff, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x294) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_gfeatures}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x5b8e1af9, 0x10000}, {0x5, 0x9}]}, 0x14, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0xfffffe49, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000340), 0x101001, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xe, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000380), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000fbffffff00000000", @ANYRES32=r4, @ANYBLOB="070000000000000000000000000000000000000056f2d0c706babb301ee12a382284585cdf56765f269d769c9b643525fcfe", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="05000000020000000100"/28], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x70, 0x10, 0x401, 0x70bd2a, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xff}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x1f}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3}]}, 0x70}}, 0x0) 2.639846953s ago: executing program 1 (id=1960): inotify_init1(0x800) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) recvmmsg(r1, &(0x7f0000000b40)=[{{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)=""/102, 0x66}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/21, 0x15}, {&(0x7f0000000600)=""/41, 0x29}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000380)=""/35, 0x23}], 0x6}, 0x99a5}, {{&(0x7f0000000b80)=@caif=@dgm, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000a40)=""/118, 0x76}], 0x3, &(0x7f0000000180)=""/22, 0x16}, 0x6}], 0x2, 0x10001, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000071ed3cbb4d53fb3baa865cac8870b808f8a7e3f5f1f623bd5d8fe872f6eea72a82401d1d7103c0828d952df53e403771ebc26f6e9e568b50f8bce1bec2b35f2b31174b1ab49a46a67e52e8c4bdadcf25eacdd42b34349426a992834310492b4200000000000000000000ab26a01f6a6e00d6a8dfa272b657e78d1650cb2ee805259d79ffca71297dca73bca5c35a6b58e3b56ff7d88a12256726", @ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES64=r2, @ANYRES32, @ANYBLOB="14359868dad8def78d2acc8c250024ac459748d0b0b0b112601ec12a6db0b3983dbff6a53835febbce225dc69019fa697fc6c9d7ae555afd6189a5e319907471c3c44d80984e767743c61eb41e03e19e80983a1930f312823f0af3bf2ea1b8aa69553630d4dbdc0d6a691209b08a1f6c7649da189f5689c260e710d94202e29496a7fd26e3b9059e07a8947c996052b249e5afad85a1d31db2c270f08ed6eacf6b40d3809ccebc74be4b03a969c0a7635d2b2c9656fbb822723efa0c0cd857c964e61a005ff59469363f6f05006c85670da83f5ae1a4b1c39bb5c2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1888da49774e3fb21bbe00000000000000000004000000000000007a8a", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, 0x0, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000000)={0x4, @raw_data="abfb0142761ae7910716c2d0f13f272c8a034c458bf9c78185efff093599b48b1d3d02d0d95352bbe628352d0b0037cbe283f581f47a88dc672d8342eed4bfd6796ed614c4de1f8e9164cd74224cd679b184aaa20b0b7b1582625a05cf808673219153c71b1c8bc0a3d5664687f4929176f40dd9a2a06840f7e2e51886930fbf77ba2ab04b0ff4df496bb407117945aa67f89b97e32b3bef137996abb87d3e022eb9b8de753f082749fcfdbdc373f1fe400757d831ba3d6b35b800546bea0bbc0e3e1ba768e32a90"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x90000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0xffffffffffffff06, 0x0, 0x1, 0x0, 0x0, 0x88e5eea3071e0b9a}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0xfff6, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000040)=0x7, 0x4) 2.452972584s ago: executing program 1 (id=1961): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)={0x34, r6, 0x1, 0x70b52c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "ed"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r10}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x1, 0x7, 0xd510, r10}, 0x10) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.28595336s ago: executing program 2 (id=1962): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000000)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x2}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) uname(&(0x7f0000000080)=""/209) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x5d6, @loopback, 0xf}}}, 0x90) 2.274382288s ago: executing program 1 (id=1963): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f000000a380)=""/4108, 0x100c}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f0000002300)=""/187, 0xbb}], 0x3}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)}, 0x81}], 0x4, 0x0, 0x0) 2.141020032s ago: executing program 1 (id=1964): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) read(r1, &(0x7f0000001000)=""/90, 0x5a) 2.005536231s ago: executing program 3 (id=1965): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = syz_ublk_setup_io_uring(0x1580, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000d00)={'filter\x00', 0x7, 0x4, 0x3d4, 0x10c, 0x0, 0x1f8, 0x2f4, 0x2f4, 0x2f4, 0x4, &(0x7f0000000180), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @broadcast, 0x4, 0xffffffff}}}, {{@uncond, 0xbc, 0xec}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x80, 0x7, 0x8, 0x2}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c32a11af8ecfb9aba9136692eafc014219df231fe356ed2e0bbff6ff00cb"}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x420) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f00000002c0)={0x0, 0x42c6, 0x0, 0x1, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffff, 0x1000, 0x1ffc, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x32c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x1, 0x76, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x2, 0x2c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008700), 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x80000) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$inet6(r10, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r12, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 1.787220814s ago: executing program 0 (id=1966): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='devices.list\x00', 0x275a, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000380)="05b8de7a", 0x4}], 0x1, 0x0, 0x0, 0x20004011}, 0x20000000) write$cgroup_subtree(r0, 0x0, 0x32600) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}]}, &(0x7f0000000480)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x2}, 0x8) 1.697525613s ago: executing program 1 (id=1967): writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000500)="c65fb59c9da8e48f19a6518ed4f17dc574102f889b4a4a325c7cebc58b96e0e7fc5dd4fbeda67d1d6b6d8a799e7f4b67fc880e1c8108b067f6142bc1d7d672e56c4a3790c47f0c24347b", 0x4a}], 0x1) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa8, r0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000030000000000000000000000000000000000000000000000c0f8d211af6f333c6a0985a58c9472d9cbbfdb504d6c1d0246a0121188f73fc6d0f686da48a789a94d052115b65a9ef446f0c43be76b4b6fddebf4c1a1c7f3eee20e8b639e8f74c4fed09369ae71fa2cb5ce57a469baeb8e0dbd204f"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x6, 0x6, 0x9]}, &(0x7f0000000200)=0x44) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000"], 0x0) r2 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0xc01, 0xc001, 0x22, &(0x7f00000008c0)="2103c2680eea91545607647fa2ffe2c880c92e82c77479e9cae87c6c5764e25c36a2"}, {0x7, 0x0, 0x0, 0x0}], 0x2}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000002300)={&(0x7f0000000100)=[{0x2b5, 0x9c11, 0x0, 0x0}], 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_NAME(0x4, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000180)) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7}]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000004c0)={r7, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x301703) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x63, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045518, &(0x7f0000002a40)) 1.645798884s ago: executing program 4 (id=1968): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x2a03}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x80}]}, {0x4}]}]}, 0x30}}, 0x4040005) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) dup3(r2, r5, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.502514928s ago: executing program 4 (id=1969): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x12, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0xc, "f355438d"}, @global=@item_012={0x1, 0x1, 0x4, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000040)={0x2, 0xffffffff, 0x3}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x7dcb, 0x0, 0x1, 0xb, 0x40}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.328280195s ago: executing program 2 (id=1970): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c00000002060102ef000000000000000000000005000400000000000900020000050001000700040005e805000a000000140007800800114000000001080012400000ffff1d00030068618c683a00000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000100)={{}, {r3, r4/1000+10000}}, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r9, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000640)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{}]}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x2, 0x106c, 0xe, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x3, 0x4, 0x0, 0xea], 0x1, 0x2c0210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000002c0)) 716.213907ms ago: executing program 0 (id=1971): inotify_init1(0x800) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000380), 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)=""/102, 0x66}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/21, 0x15}, {&(0x7f0000000600)=""/41, 0x29}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000380)=""/35, 0x23}], 0x6}, 0x99a5}, {{&(0x7f0000000b80)=@caif=@dgm, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000a40)=""/118, 0x76}], 0x3, &(0x7f0000000180)=""/22, 0x16}, 0x6}], 0x2, 0x10001, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000071ed3cbb4d53fb3baa865cac8870b808f8a7e3f5f1f623bd5d8fe872f6eea72a82401d1d7103c0828d952df53e403771ebc26f6e9e568b50f8bce1bec2b35f2b31174b1ab49a46a67e52e8c4bdadcf25eacdd42b34349426a992834310492b4200000000000000000000ab26a01f6a6e00d6a8dfa272b657e78d1650cb2ee805259d79ffca71297dca73bca5c35a6b58e3b56ff7d88a12256726", @ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES64=r2, @ANYRES32, @ANYBLOB="14359868dad8def78d2acc8c250024ac459748d0b0b0b112601ec12a6db0b3983dbff6a53835febbce225dc69019fa697fc6c9d7ae555afd6189a5e319907471c3c44d80984e767743c61eb41e03e19e80983a1930f312823f0af3bf2ea1b8aa69553630d4dbdc0d6a691209b08a1f6c7649da189f5689c260e710d94202e29496a7fd26e3b9059e07a8947c996052b249e5afad85a1d31db2c270f08ed6eacf6b40d3809ccebc74be4b03a969c0a7635d2b2c9656fbb822723efa0c0cd857c964e61a005ff59469363f6f05006c85670da83f5ae1a4b1c39bb5c2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1888da49774e3fb21bbe00000000000000000004000000000000007a8a", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, 0x0, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000000)={0x4, @raw_data="abfb0142761ae7910716c2d0f13f272c8a034c458bf9c78185efff093599b48b1d3d02d0d95352bbe628352d0b0037cbe283f581f47a88dc672d8342eed4bfd6796ed614c4de1f8e9164cd74224cd679b184aaa20b0b7b1582625a05cf808673219153c71b1c8bc0a3d5664687f4929176f40dd9a2a06840f7e2e51886930fbf77ba2ab04b0ff4df496bb407117945aa67f89b97e32b3bef137996abb87d3e022eb9b8de753f082749fcfdbdc373f1fe400757d831ba3d6b35b800546bea0bbc0e3e1ba768e32a90"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x90000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0xffffffffffffff06, 0x0, 0x1, 0x0, 0x0, 0x88e5eea3071e0b9a}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0xfff6, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000040)=0x7, 0x4) 529.851469ms ago: executing program 0 (id=1972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)}, 0x1}], 0x1, 0x20, 0x0) 400.879808ms ago: executing program 0 (id=1973): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)={0x34, r6, 0x1, 0x70b52c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "ed"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r10}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x1, 0x7, 0xd510, r10}, 0x10) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 207.7653ms ago: executing program 4 (id=1974): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f000000a380)=""/4108, 0x100c}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f0000002300)=""/187, 0xbb}], 0x3}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)}, 0x81}], 0x4, 0x0, 0x0) 113.113277ms ago: executing program 2 (id=1975): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x20004, r2, 0x2}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0xfffffff6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r4}) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsync(r7) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01864c1, &(0x7f0000000280)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01864c1, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={r6}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="800400001900", 0x0, 0x0, 0x10012, 0xfffbffff, 0x0}) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r10, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) write$tun(r9, &(0x7f0000000400)=ANY=[], 0xa2) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) 55.788035ms ago: executing program 1 (id=1976): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff024}, {0xb1, 0xe, 0x0, 0x46}, {0x6, 0x0, 0x0, 0x6ce3}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) (fail_nth: 16) 1.420878ms ago: executing program 0 (id=1977): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) read(r1, &(0x7f0000001000)=""/90, 0x5a) 0s ago: executing program 4 (id=1978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x7, 0x82, 0x40, 0x3}, {0x5, 0xf8, 0x0, 0x5}, {0x7fff, 0x44, 0x6, 0x7}]}) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'veth0_to_hsr\x00', &(0x7f0000000240)=@ethtool_eeprom={0x4f}}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009070000000000000080100007800a001100aaaaaaaaaaaa0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) kernel console output (not intermixed with test programs): 004] [ 413.875989][ T5723] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 413.886897][ T1225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 413.921972][ T1225] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 413.935860][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 413.957537][ T1225] usb 2-1: Product: syz [ 413.963299][ T1225] usb 2-1: Manufacturer: syz [ 413.975910][ T1225] usb 2-1: SerialNumber: syz [ 413.989026][ T1225] usb 2-1: config 0 descriptor?? [ 414.014495][ T5723] sony 0003:054C:0374.0010: hiddev0,hidraw0: USB HID v0.05 Device [HID 054c:0374] on usb-dummy_hcd.0-1/input0 [ 414.037460][ T5723] sony 0003:054C:0374.0010: failed to claim input [ 414.045885][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.079854][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 414.087977][ T5723] usb 1-1: USB disconnect, device number 68 [ 414.088001][T10751] usb 4-1: USB disconnect, device number 84 [ 414.124246][T10751] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 414.135934][ T1225] rc_core: IR keymap rc-imon-rsc not found [ 414.142218][ T1225] Registered IR keymap rc-empty [ 414.149144][T10751] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 414.162699][ T1225] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 414.164480][T10751] quatech2 4-1:0.51: device disconnected [ 414.177858][T11254] fido_id[11254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 414.188705][ T1225] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input94 [ 414.479105][T11258] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1593'. [ 414.956077][T10751] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 415.085923][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.126032][T10751] usb 4-1: Using ep0 maxpacket: 8 [ 415.143093][T10751] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 415.155102][T10751] usb 4-1: config 0 has no interface number 0 [ 415.175347][T10751] usb 4-1: config 0 interface 1 has no altsetting 0 [ 415.190895][T10751] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 415.202021][T10751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.223686][T10751] usb 4-1: Product: syz [ 415.233845][T10751] usb 4-1: Manufacturer: syz [ 415.245916][T10751] usb 4-1: SerialNumber: syz [ 415.261200][T10751] usb 4-1: config 0 descriptor?? [ 415.487273][T11265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.504200][T11265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.522608][T10751] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 415.547464][T10751] usb 4-1: USB disconnect, device number 85 [ 415.605411][T11277] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 415.628814][T11279] netlink: zone id is out of range [ 415.634955][T11279] netlink: zone id is out of range [ 415.637830][T11275] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 415.657272][T11277] bond2: (slave lo): Enslaving as an active interface with an up link [ 415.686619][T11277] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 415.801260][T11275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.061624][ T1225] usb 3-1: USB disconnect, device number 85 [ 416.135939][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.236445][T10751] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 416.255626][T11294] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1606'. [ 416.306151][ T24] usb 2-1: USB disconnect, device number 76 [ 416.433377][T10751] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.497287][T10751] usb 5-1: config 0 has no interfaces? [ 416.529302][T10751] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 416.544059][T10751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.552566][T10751] usb 5-1: Product: syz [ 416.556957][T10751] usb 5-1: Manufacturer: syz [ 416.561618][T10751] usb 5-1: SerialNumber: syz [ 416.623545][T10751] usb 5-1: config 0 descriptor?? [ 416.780652][T11308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1613'. [ 416.792669][T11308] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1613'. [ 416.807126][T11308] unsupported nlmsg_type 40 [ 416.829471][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 417.006749][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 417.008848][ T24] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 417.044938][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.044966][ T24] usb 1-1: config 0 has no interface number 0 [ 417.045008][ T24] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.137668][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 417.156927][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.156956][ T24] usb 1-1: Product: syz [ 417.156971][ T24] usb 1-1: Manufacturer: syz [ 417.156986][ T24] usb 1-1: SerialNumber: syz [ 417.162271][ T24] usb 1-1: config 0 descriptor?? [ 417.166235][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.177753][ T24] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 417.177827][ T24] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 417.206731][T10751] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 417.251371][T11289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.308416][T11289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.395649][T10751] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 417.395709][T10751] usb 4-1: can't read configurations, error -61 [ 417.434186][T11289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.434214][T11289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.450395][T11289] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 417.539874][ T24] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 417.548736][T10751] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 417.585937][ T5723] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 417.699935][T10751] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 417.714586][T10751] usb 4-1: can't read configurations, error -61 [ 417.738545][ T5723] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.743357][T10751] usb usb4-port1: attempt power cycle [ 417.763697][ T24] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 417.773945][ T5723] usb 2-1: config 0 has no interface number 0 [ 417.793154][ T5723] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 417.826841][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.853477][ T5723] usb 2-1: config 0 descriptor?? [ 417.868509][ T24] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 417.885546][ T5723] usb 2-1: selecting invalid altsetting 1 [ 417.905738][ T24] usb 1-1: USB disconnect, device number 69 [ 417.909629][ T5723] dvb_ttusb_budget: ttusb_init_controller: error [ 417.932985][ T24] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 417.953419][ T5723] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 418.078510][ T1225] usb 5-1: USB disconnect, device number 98 [ 418.117214][T10751] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 418.179712][T10751] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 418.205895][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.209070][T10751] usb 4-1: can't read configurations, error -61 [ 418.224193][ T5723] DVB: Unable to find symbol ves1820_attach() [ 418.294737][ T5723] DVB: Unable to find symbol stv0297_attach() [ 418.302628][ T5723] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 418.391886][T10751] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 418.437263][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 418.440489][T10751] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 418.454432][T10751] usb 4-1: can't read configurations, error -61 [ 418.461297][T10751] usb usb4-port1: unable to enumerate USB device [ 418.597079][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 418.608919][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.620154][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 418.632456][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.647536][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 418.658022][ T9] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 418.667175][ T9] usb 3-1: Product: syz [ 418.671591][ T9] usb 3-1: Manufacturer: syz [ 418.676754][ T9] usb 3-1: SerialNumber: syz [ 418.685660][ T9] usb 3-1: config 0 descriptor?? [ 418.769378][ T9] rc_core: IR keymap rc-imon-rsc not found [ 418.783298][ T9] Registered IR keymap rc-empty [ 418.806321][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 418.838925][ T9] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input95 [ 419.245899][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.232049][T10751] usb 2-1: USB disconnect, device number 77 [ 420.285992][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.943874][T10751] usb 3-1: USB disconnect, device number 86 [ 420.965594][T11371] kAFS: unable to lookup cell '' [ 421.047806][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 421.047818][ T30] audit: type=1326 audit(1781377183.637:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.3.1630" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6706c code=0x7ffc0000 [ 421.093751][ T30] audit: type=1326 audit(1781377183.637:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.3.1630" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6706c code=0x7ffc0000 [ 421.124391][ T30] audit: type=1326 audit(1781377183.667:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.3.1630" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f6706c code=0x7ffc0000 [ 421.162123][ T30] audit: type=1326 audit(1781377183.707:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.3.1630" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6706c code=0x7ffc0000 [ 421.191901][ T30] audit: type=1326 audit(1781377183.707:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.3.1630" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf7f6706c code=0x7ffc0000 [ 421.221922][ T30] audit: type=1326 audit(1781377183.707:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.3.1630" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6706c code=0x7ffc0000 [ 421.263987][ T30] audit: type=1326 audit(1781377183.707:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.3.1630" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f6706c code=0x7ffc0000 [ 421.294141][ T30] audit: type=1326 audit(1781377183.707:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.3.1630" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6706c code=0x7ffc0000 [ 421.319540][ T30] audit: type=1326 audit(1781377183.707:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.3.1630" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f6706c code=0x7ffc0000 [ 421.348607][ T30] audit: type=1326 audit(1781377183.707:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.3.1630" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6706c code=0x7ffc0000 [ 421.355888][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.447706][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 421.554420][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 421.617260][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 421.630804][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 421.657586][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 421.672658][ T9] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 421.682473][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.723919][ T9] usb 4-1: Product: syz [ 421.739718][ T9] usb 4-1: Manufacturer: syz [ 421.754426][ T9] usb 4-1: SerialNumber: syz [ 421.773992][ T9] usb 4-1: config 0 descriptor?? [ 421.846296][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 421.873045][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 421.925734][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.145904][ T1225] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 422.154447][T11396] input: syz1 as /devices/virtual/input/input96 [ 422.343956][ T1225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 422.360559][ T1225] usb 5-1: too many configurations: 199, using maximum allowed: 8 [ 422.368635][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.405172][ T1225] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 422.413161][ T1225] usb 5-1: can't read configurations, error -71 [ 423.131875][T11413] xt_CT: No such helper "netbios-ns" [ 423.377354][ T5723] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 423.405942][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.447669][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 423.566262][ T5723] usb 2-1: Using ep0 maxpacket: 8 [ 423.595475][ T5723] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.632915][ T5723] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 423.676878][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.725017][ T5723] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 423.768423][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 423.794777][ T5723] usb 2-1: Product: syz [ 423.816065][ T5723] usb 2-1: Manufacturer: syz [ 423.837338][ T5723] usb 2-1: SerialNumber: syz [ 423.866163][ T5723] usb 2-1: config 0 descriptor?? [ 423.939400][ T29] usb 4-1: USB disconnect, device number 90 [ 424.046815][ T5723] rc_core: IR keymap rc-imon-rsc not found [ 424.056749][ T5723] Registered IR keymap rc-empty [ 424.084239][ T5723] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 424.118272][ T5723] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input97 [ 424.328292][ T1225] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 424.446076][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.503715][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 424.550185][ T1225] usb 1-1: unable to get BOS descriptor or descriptor too short [ 424.568615][T11429] openvswitch: netlink: Duplicate key (type 32). [ 424.584164][ T1225] usb 1-1: not running at top speed; connect to a high speed hub [ 424.617326][ T1225] usb 1-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 424.651568][ T1225] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 424.662023][ T1225] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 424.682341][ T1225] usb 1-1: config 9 has no interface number 0 [ 424.701956][ T1225] usb 1-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 424.712688][ T1225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.720935][ T1225] usb 1-1: Product: syz [ 424.725291][ T1225] usb 1-1: Manufacturer: syz [ 424.730632][ T1225] usb 1-1: SerialNumber: syz [ 425.056261][ T29] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 425.177195][ T1225] cdc_phonet 1-1:9.102: skipping garbage [ 425.188297][ T1225] cdc_phonet 1-1:9.102: probe with driver cdc_phonet failed with error -22 [ 425.206125][ T29] usb 4-1: device descriptor read/64, error -71 [ 425.225397][ T1225] usb 1-1: USB disconnect, device number 70 [ 425.361655][T11440] usb usb7: usbfs: process 11440 (syz.4.1651) did not claim interface 0 before use [ 425.465903][ T29] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 425.495928][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.605923][ T29] usb 4-1: device descriptor read/64, error -71 [ 425.726414][ T29] usb usb4-port1: attempt power cycle [ 425.916900][ T1225] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 426.086222][ T29] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 426.089084][ T1225] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.106999][ T1225] usb 5-1: config 0 has no interface number 0 [ 426.118425][ T1225] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 426.127473][ T29] usb 4-1: device descriptor read/8, error -71 [ 426.135083][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.143647][ T1225] usb 5-1: Product: syz [ 426.148704][ T1225] usb 5-1: Manufacturer: syz [ 426.153543][ T1225] usb 5-1: SerialNumber: syz [ 426.164700][ T1225] usb 5-1: config 0 descriptor?? [ 426.326081][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 426.365974][ T29] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 426.397453][ T29] usb 4-1: device descriptor read/8, error -71 [ 426.431148][ T1225] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 426.464895][ T1225] usb 5-1: USB disconnect, device number 101 [ 426.505989][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 426.516753][ T10] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 426.518509][ T29] usb usb4-port1: unable to enumerate USB device [ 426.525651][ T10] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 426.531657][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.574091][ T29] usb 2-1: USB disconnect, device number 78 [ 426.584577][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 426.617004][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 426.647319][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.658755][ T10] usb 3-1: Product: syz [ 426.663084][ T10] usb 3-1: Manufacturer: syz [ 426.668423][ T10] usb 3-1: SerialNumber: syz [ 426.679700][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 426.688941][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 426.821226][T11468] usb usb7: usbfs: process 11468 (syz.1.1663) did not claim interface 0 before use [ 426.827805][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 426.923088][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.936512][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.954423][T11453] syzkaller1: entered allmulticast mode [ 426.963928][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 426.983582][ T10] r8152-cfgselector 3-1: No union descriptors [ 426.986200][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 427.002089][ T10] r8152-cfgselector 3-1: USB disconnect, device number 87 [ 427.013255][ T24] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 427.028452][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.045910][ T24] usb 1-1: Product: syz [ 427.051658][ T24] usb 1-1: Manufacturer: syz [ 427.060906][ T24] usb 1-1: SerialNumber: syz [ 427.078986][ T24] usb 1-1: config 0 descriptor?? [ 427.094447][ T24] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 427.117266][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 427.147115][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.162466][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 427.180163][ T24] usb 1-1: media controller created [ 427.201438][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.231990][ T24] usb 1-1: selecting invalid altsetting 7 [ 427.250634][ T24] cxusb: set interface failed [ 427.255362][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 427.288649][T11462] cxusb: i2c wr: len=79 is too big! [ 427.288649][T11462] [ 427.301175][ T24] DVB: Unable to find symbol lgdt330x_attach() [ 427.317097][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 427.417366][ T24] rc_core: IR keymap rc-dvico-portable not found [ 427.424025][ T24] Registered IR keymap rc-empty [ 427.434940][ T24] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 427.453375][ T24] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input98 [ 427.471776][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 427.479762][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 427.488766][ T10] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 427.502650][ T24] usb 1-1: USB disconnect, device number 71 [ 427.566154][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.579552][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 427.650118][ T10] usb 5-1: device descriptor read/64, error -71 [ 427.754975][T11487] syz_tun: left promiscuous mode [ 427.792324][T11487] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 427.895942][ T10] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 428.035923][ T10] usb 5-1: device descriptor read/64, error -71 [ 428.144167][T11502] fuse: Bad value for 'fd' [ 428.158432][ T10] usb usb5-port1: attempt power cycle [ 428.353601][T11506] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1676'. [ 428.369904][ T1225] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 428.445977][T10751] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 428.505954][ T10] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 428.547354][ T1225] usb 4-1: Using ep0 maxpacket: 8 [ 428.557786][ T10] usb 5-1: device descriptor read/8, error -71 [ 428.580321][ T1225] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.606017][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.611403][T10751] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.637050][T10751] usb 3-1: config 0 has no interfaces? [ 428.638615][ T1225] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 428.651278][T10751] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 428.670860][T10751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.687445][T10751] usb 3-1: Product: syz [ 428.695652][T10751] usb 3-1: Manufacturer: syz [ 428.704947][T10751] usb 3-1: SerialNumber: syz [ 428.713799][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.714725][T10751] usb 3-1: config 0 descriptor?? [ 428.768108][ T1225] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 428.785852][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 428.815391][ T1225] usb 4-1: Product: syz [ 428.835483][ T1225] usb 4-1: Manufacturer: syz [ 428.845344][ T1225] usb 4-1: SerialNumber: syz [ 428.870383][ T1225] usb 4-1: config 0 descriptor?? [ 428.876531][ T10] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 428.916648][ T10] usb 5-1: device descriptor read/8, error -71 [ 428.942240][T11515] fuse: Unknown parameter 'user_id00000000000000000000' [ 428.966802][ T1225] rc_core: IR keymap rc-imon-rsc not found [ 428.977138][ T1225] Registered IR keymap rc-empty [ 428.996140][ T1225] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 429.023438][ T1225] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input99 [ 429.047516][ T10] usb usb5-port1: unable to enumerate USB device [ 429.344434][T11500] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 429.442787][ T1225] usb 3-1: USB disconnect, device number 88 [ 429.656302][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.666356][ T24] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 429.819811][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.841447][ T24] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 429.862476][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.874789][ T24] usb 2-1: Product: syz [ 429.879832][ T24] usb 2-1: Manufacturer: syz [ 429.884482][ T24] usb 2-1: SerialNumber: syz [ 429.894203][ T24] usb 2-1: config 0 descriptor?? [ 430.131721][ T1225] usb 2-1: USB disconnect, device number 79 [ 430.191265][T11530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1683'. [ 430.685872][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.906312][T11554] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.952123][T11554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.078751][ T9062] usb 4-1: USB disconnect, device number 95 [ 431.144147][T11554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.174669][T11554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.203731][T11554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.224342][T11554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.260819][T11554] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 431.415760][ T592] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.424461][ T592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.481142][ T592] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.488445][ T592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.723822][T11562] fuse: Bad value for 'fd' [ 431.735953][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.121193][T11578] binder: 11575:11578 ioctl 4068aea3 80000240 returned -22 [ 432.129137][T11576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1696'. [ 432.153264][T11576] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1696'. [ 432.165951][ T9062] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 432.265969][ T5689] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 432.349099][ T9062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 432.403004][ T9062] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.436579][ T5689] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 432.455333][ T9062] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 432.484441][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 432.502358][ T5689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 432.527204][ T9062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.540157][ T5689] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 432.551668][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.571227][ T9062] usb 3-1: config 0 descriptor?? [ 432.606963][ T5689] usb 2-1: Product: syz [ 432.623130][ T5689] usb 2-1: Manufacturer: syz [ 432.642368][ T5689] usb 2-1: SerialNumber: syz [ 432.664955][ T5689] usb 2-1: config 0 descriptor?? [ 432.690391][T11566] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 432.765967][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.970032][T11566] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 433.815886][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.325920][T10751] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 434.496124][T10751] usb 5-1: Using ep0 maxpacket: 8 [ 434.551094][T10751] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.605370][T10751] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 434.651892][T10751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.709627][T10751] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 434.725984][ T5689] usb 2-1: USB disconnect, device number 80 [ 434.755293][T10751] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 434.814764][T10751] usb 5-1: Product: syz [ 434.834440][T10751] usb 5-1: Manufacturer: syz [ 434.855875][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.879235][T10751] usb 5-1: SerialNumber: syz [ 435.060392][T10751] usb 5-1: config 0 descriptor?? [ 435.154906][ T5723] hid_parser_main: 4003 callbacks suppressed [ 435.154928][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 435.213773][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 435.241833][T11617] FAULT_INJECTION: forcing a failure. [ 435.241833][T11617] name failslab, interval 1, probability 0, space 0, times 0 [ 435.242506][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 435.258143][T11617] CPU: 1 UID: 0 PID: 11617 Comm: syz.1.1705 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.258172][T11617] Tainted: [L]=SOFTLOCKUP [ 435.258179][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 435.258193][T11617] Call Trace: [ 435.258201][T11617] [ 435.258212][T11617] dump_stack_lvl+0xe8/0x150 [ 435.258240][T11617] should_fail_ex+0x40c/0x560 [ 435.258267][T11617] should_failslab+0xa8/0x100 [ 435.258296][T11617] __kmalloc_cache_noprof+0x88/0x660 [ 435.258321][T11617] ? kvm_hv_vcpu_init+0x8c/0xb00 [ 435.258369][T11617] ? stack_trace_save+0xa9/0x100 [ 435.258397][T11617] kvm_hv_vcpu_init+0x8c/0xb00 [ 435.258417][T11617] ? kvm_hv_set_msr_common+0xb1/0x3670 [ 435.258442][T11617] kvm_hv_set_msr_common+0xe8/0x3670 [ 435.258467][T11617] ? kasan_save_track+0x4f/0x80 [ 435.258489][T11617] ? kasan_save_track+0x3e/0x80 [ 435.258510][T11617] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 435.258533][T11617] ? memdup_user+0x2b/0xd0 [ 435.258556][T11617] ? kvm_arch_vcpu_ioctl+0x76b/0x2fd0 [ 435.258585][T11617] ? __pfx_kvm_hv_set_msr_common+0x10/0x10 [ 435.258605][T11617] ? __do_fast_syscall_32+0x23e/0x6f0 [ 435.258625][T11617] ? do_fast_syscall_32+0x33/0x70 [ 435.258646][T11617] ? __lock_acquire+0x683/0x2cd0 [ 435.258669][T11617] kvm_set_msr_common+0x1f05/0x4330 [ 435.258693][T11617] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 435.258727][T11617] vmx_set_msr+0x15b3/0x27f0 [ 435.258751][T11617] __kvm_set_msr+0x60c/0xab0 [ 435.258778][T11617] ? __pfx___kvm_set_msr+0x10/0x10 [ 435.258808][T11617] ? __pfx_do_set_msr+0x10/0x10 [ 435.258825][T11617] kvm_set_msr_ignored_check+0x2a/0x390 [ 435.258850][T11617] ? __pfx_do_set_msr+0x10/0x10 [ 435.258868][T11617] msr_io+0x3f5/0x8b0 [ 435.258890][T11617] ? __pfx_do_set_msr+0x10/0x10 [ 435.258909][T11617] ? __pfx_msr_io+0x10/0x10 [ 435.258929][T11617] ? __srcu_check_read_flavor+0x116/0x260 [ 435.258960][T11617] kvm_arch_vcpu_ioctl+0x76b/0x2fd0 [ 435.258986][T11617] ? kvm_arch_vcpu_ioctl+0x731/0x2fd0 [ 435.259004][T11617] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 435.259025][T11617] ? __lock_acquire+0x683/0x2cd0 [ 435.259057][T11617] ? unwind_next_frame+0x8f/0x2550 [ 435.259094][T11617] ? is_bpf_text_address+0x26/0x2b0 [ 435.259122][T11617] ? is_bpf_text_address+0x26/0x2b0 [ 435.259144][T11617] ? is_bpf_text_address+0x292/0x2b0 [ 435.259161][T11617] ? is_bpf_text_address+0x26/0x2b0 [ 435.259181][T11617] ? kernel_text_address+0xa5/0xe0 [ 435.259205][T11617] ? __kernel_text_address+0xd/0x30 [ 435.259227][T11617] ? unwind_get_return_address+0x4d/0x90 [ 435.259247][T11617] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 435.259272][T11617] ? arch_stack_walk+0xfb/0x150 [ 435.259303][T11617] ? __lock_acquire+0x683/0x2cd0 [ 435.259324][T11617] ? stack_trace_save+0xa9/0x100 [ 435.259348][T11617] ? __pfx_stack_trace_save+0x10/0x10 [ 435.259370][T11617] ? kasan_save_track+0x4f/0x80 [ 435.259394][T11617] ? stack_depot_save_flags+0x33/0x800 [ 435.259423][T11617] ? __mutex_trylock_common+0x15f/0x270 [ 435.259448][T11617] ? __pfx___mutex_trylock_common+0x10/0x10 [ 435.259473][T11617] ? rcu_is_watching+0x15/0xb0 [ 435.259493][T11617] ? trace_contention_end+0x3d/0x140 [ 435.259517][T11617] ? __mutex_lock+0x30f/0x1590 [ 435.259544][T11617] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 435.259568][T11617] ? __pfx___mutex_lock+0x10/0x10 [ 435.259593][T11617] ? kasan_quarantine_put+0xbb/0x1f0 [ 435.259625][T11617] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 435.259652][T11617] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 435.259673][T11617] ? do_vfs_ioctl+0x116f/0x1540 [ 435.259700][T11617] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 435.259743][T11617] ? hook_file_ioctl_compat+0x1f0/0x5c0 [ 435.259875][T11617] kvm_vcpu_compat_ioctl+0x204/0x390 [ 435.259901][T11617] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 435.259925][T11617] ? __fget_files+0x3a2/0x420 [ 435.259945][T11617] ? __fget_files+0x2a/0x420 [ 435.259969][T11617] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 435.259998][T11617] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 435.260027][T11617] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 435.260055][T11617] ? __fget_files+0x3a2/0x420 [ 435.260082][T11617] ? fput+0xa0/0xd0 [ 435.260102][T11617] ? ksys_write+0x242/0x270 [ 435.260138][T11617] __do_fast_syscall_32+0x23e/0x6f0 [ 435.260156][T11617] ? do_fast_syscall_32+0x33/0x70 [ 435.260173][T11617] ? lockdep_hardirqs_on+0x7a/0x110 [ 435.260197][T11617] ? asm_int80_emulation+0x1a/0x20 [ 435.260214][T11617] ? do_int80_emulation+0x29f/0x550 [ 435.260231][T11617] ? trace_irq_disable+0x3b/0x140 [ 435.260258][T11617] do_fast_syscall_32+0x33/0x70 [ 435.260277][T11617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.260298][T11617] RIP: 0023:0xf6fcf06c [ 435.260315][T11617] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 435.260330][T11617] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 435.260349][T11617] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000004008ae89 [ 435.260362][T11617] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.260372][T11617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.260383][T11617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 435.260393][T11617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.260421][T11617] [ 435.275746][T10751] rc_core: IR keymap rc-imon-rsc not found [ 435.282878][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 435.315515][T10751] Registered IR keymap rc-empty [ 435.364665][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 435.394847][T10751] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 435.433527][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 435.433585][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 435.433613][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 435.433640][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 435.433666][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 435.436214][ T5723] hid-generic 0004:FFFFFFFF:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 435.626130][T10751] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input101 [ 435.782677][ T10] hid-generic 0006:0008:0001.0012: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 435.828229][T11626] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 435.895876][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.214386][T11631] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 436.306983][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 436.306999][ T30] audit: type=1326 audit(1781377198.897:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1709" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f06c code=0x7ffc0000 [ 436.374156][ T30] audit: type=1326 audit(1781377198.927:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1709" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f06c code=0x7ffc0000 [ 436.422493][T11631] kvm: kvm [11630]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 436.465923][ T30] audit: type=1326 audit(1781377198.947:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1709" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f06c code=0x7ffc0000 [ 436.527379][ T30] audit: type=1326 audit(1781377198.947:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1709" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f06c code=0x7ffc0000 [ 436.616722][ T30] audit: type=1326 audit(1781377198.947:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1709" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf704f06c code=0x7ffc0000 [ 436.716150][ T30] audit: type=1326 audit(1781377198.947:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1709" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f06c code=0x7ffc0000 [ 436.793750][ T30] audit: type=1326 audit(1781377198.947:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1709" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704f06c code=0x7ffc0000 [ 436.878279][ T30] audit: type=1326 audit(1781377198.947:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1709" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f06c code=0x7ffc0000 [ 436.925889][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.952953][ T30] audit: type=1326 audit(1781377198.947:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1709" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704f06c code=0x7ffc0000 [ 436.995746][ T30] audit: type=1326 audit(1781377199.237:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1709" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f06c code=0x7ffc0000 [ 437.050797][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 437.204065][T11645] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1712'. [ 437.421322][T11653] FAULT_INJECTION: forcing a failure. [ 437.421322][T11653] name failslab, interval 1, probability 0, space 0, times 0 [ 437.528048][T11653] CPU: 1 UID: 0 PID: 11653 Comm: syz.0.1717 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.528072][T11653] Tainted: [L]=SOFTLOCKUP [ 437.528078][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.528088][T11653] Call Trace: [ 437.528096][T11653] [ 437.528104][T11653] dump_stack_lvl+0xe8/0x150 [ 437.528135][T11653] should_fail_ex+0x40c/0x560 [ 437.528160][T11653] should_failslab+0xa8/0x100 [ 437.528182][T11653] __kmalloc_noprof+0xe8/0x750 [ 437.528196][T11653] ? tomoyo_realpath_from_path+0xef/0x640 [ 437.528319][T11653] tomoyo_realpath_from_path+0xef/0x640 [ 437.528342][T11653] ? tomoyo_path_number_perm+0x219/0x5f0 [ 437.528355][T11653] tomoyo_path_number_perm+0x246/0x5f0 [ 437.528367][T11653] ? lockdep_hardirqs_on+0x7a/0x110 [ 437.528384][T11653] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 437.528405][T11653] ? __lock_acquire+0x683/0x2cd0 [ 437.528440][T11653] ? hook_file_ioctl_compat+0x1f0/0x5c0 [ 437.528481][T11653] ? __fget_files+0x2a/0x420 [ 437.528495][T11653] ? __fget_files+0x3a2/0x420 [ 437.528506][T11653] ? __fget_files+0x2a/0x420 [ 437.528519][T11653] security_file_ioctl_compat+0xc3/0x2a0 [ 437.528576][T11653] __ia32_compat_sys_ioctl+0x139/0x950 [ 437.528606][T11653] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 437.528633][T11653] ? __fget_files+0x3a2/0x420 [ 437.528647][T11653] ? fput+0xa0/0xd0 [ 437.528659][T11653] ? ksys_write+0x242/0x270 [ 437.528678][T11653] __do_fast_syscall_32+0x23e/0x6f0 [ 437.528691][T11653] ? do_fast_syscall_32+0x33/0x70 [ 437.528708][T11653] ? lockdep_hardirqs_on+0x7a/0x110 [ 437.528733][T11653] ? asm_int80_emulation+0x1a/0x20 [ 437.528750][T11653] ? do_int80_emulation+0x29f/0x550 [ 437.528767][T11653] ? trace_irq_disable+0x3b/0x140 [ 437.528788][T11653] do_fast_syscall_32+0x33/0x70 [ 437.528798][T11653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.528810][T11653] RIP: 0023:0xf704f06c [ 437.528821][T11653] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 437.528830][T11653] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 437.528844][T11653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0305602 [ 437.528856][T11653] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 437.528868][T11653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.528879][T11653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 437.528890][T11653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.528918][T11653] [ 437.528972][T11653] ERROR: Out of memory at tomoyo_realpath_from_path. [ 437.838604][ T5723] usb 5-1: USB disconnect, device number 106 [ 437.965945][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.049979][ T9062] usbhid 3-1:0.0: can't add hid device: -32 [ 438.059622][ T9062] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 438.484486][T11670] capability: warning: `syz.1.1723' uses 32-bit capabilities (legacy support in use) [ 438.661450][T11666] binder: 11663:11666 ioctl c018620c 80000780 returned -22 [ 438.876206][ T5723] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 439.002323][T11676] syzkaller0: mtu greater than device maximum [ 439.015965][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.051636][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.077641][ T5723] usb 5-1: config 0 has no interfaces? [ 439.098006][ T5723] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 439.118546][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.137849][ T5723] usb 5-1: Product: syz [ 439.150047][ T5723] usb 5-1: Manufacturer: syz [ 439.154799][ T5723] usb 5-1: SerialNumber: syz [ 439.178583][ T5723] usb 5-1: config 0 descriptor?? [ 439.215922][ T5689] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 439.392597][ T5689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.440510][T11672] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 439.460463][ T5689] usb 2-1: config 0 has no interfaces? [ 439.475169][ T5689] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 439.494541][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.494805][ T9062] usb 5-1: USB disconnect, device number 107 [ 439.514807][ T5689] usb 2-1: Product: syz [ 439.528109][ T5689] usb 2-1: Manufacturer: syz [ 439.536117][ T5689] usb 2-1: SerialNumber: syz [ 439.562569][ T5689] usb 2-1: config 0 descriptor?? [ 439.616010][ T5723] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 439.665494][T11689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.705412][T11689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.776175][ T5723] usb 4-1: Using ep0 maxpacket: 8 [ 439.791922][ T5723] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 439.810172][ T5723] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 439.829279][ T5723] usb 4-1: Product: syz [ 439.845301][ T5723] usb 4-1: Manufacturer: syz [ 439.859646][ T5723] usb 4-1: SerialNumber: syz [ 439.879750][ T5723] usb 4-1: config 0 descriptor?? [ 439.888404][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.894843][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.909694][ T5723] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 439.920312][T11691] usb usb7: usbfs: process 11691 (syz.0.1731) did not claim interface 0 before use [ 440.045946][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.054662][T11674] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 440.228231][ T9062] usb 2-1: USB disconnect, device number 81 [ 440.514474][ T5723] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input102 [ 440.568463][T11704] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1735'. [ 440.738381][ T5723] usb 4-1: USB disconnect, device number 96 [ 441.085952][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.499607][T11719] random: crng reseeded on system resumption [ 441.872585][ T5723] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 442.078122][ T5723] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 442.107819][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.135884][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.162927][ T5723] usb 5-1: config 0 descriptor?? [ 442.256179][ T9062] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 442.389074][T11722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.437919][ T9062] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.448561][T11722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.473655][ T9062] usb 4-1: config 0 has no interfaces? [ 442.494282][ T5723] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 442.512214][ T9062] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 442.535589][ T9062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.562603][ T9062] usb 4-1: Product: syz [ 442.568258][ T9062] usb 4-1: Manufacturer: syz [ 442.568280][ T9062] usb 4-1: SerialNumber: syz [ 442.579786][ T9062] usb 4-1: config 0 descriptor?? [ 442.698252][ T5723] [drm:udl_init] *ERROR* Selecting channel failed [ 442.780330][T11743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.839427][T11743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.862315][ T5723] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 442.885111][ T5723] [drm] Initialized udl on minor 2 [ 442.934919][ T5723] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 442.977196][ T5723] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 443.001210][ T5723] usb 5-1: USB disconnect, device number 108 [ 443.070952][ T9062] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 443.079048][T11730] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 443.107981][T11745] FAULT_INJECTION: forcing a failure. [ 443.107981][T11745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.174426][ T9062] usb 4-1: USB disconnect, device number 97 [ 443.180474][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.203839][T11745] CPU: 1 UID: 0 PID: 11745 Comm: syz.1.1748 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.203869][T11745] Tainted: [L]=SOFTLOCKUP [ 443.203875][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.203885][T11745] Call Trace: [ 443.203894][T11745] [ 443.203903][T11745] dump_stack_lvl+0xe8/0x150 [ 443.203930][T11745] should_fail_ex+0x40c/0x560 [ 443.203955][T11745] _copy_to_user+0x31/0xb0 [ 443.203979][T11745] simple_read_from_buffer+0xe1/0x170 [ 443.204019][T11745] proc_fail_nth_read+0x1bb/0x230 [ 443.204085][T11745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.204118][T11745] ? rw_verify_area+0x24a/0x4c0 [ 443.204143][T11745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.204165][T11745] vfs_read+0x213/0xa80 [ 443.204193][T11745] ? __pfx___mutex_lock+0x10/0x10 [ 443.204213][T11745] ? __pfx_vfs_read+0x10/0x10 [ 443.204239][T11745] ? __fget_files+0x2a/0x420 [ 443.204264][T11745] ? __fget_files+0x3a2/0x420 [ 443.204284][T11745] ? __fget_files+0x2a/0x420 [ 443.204313][T11745] ksys_read+0x150/0x270 [ 443.204340][T11745] ? __pfx_ksys_read+0x10/0x10 [ 443.204368][T11745] ? asm_int80_emulation+0x1a/0x20 [ 443.204391][T11745] do_int80_emulation+0x19a/0x550 [ 443.204409][T11745] ? trace_irq_disable+0x3b/0x140 [ 443.204431][T11745] ? asm_int80_emulation+0x1a/0x20 [ 443.204447][T11745] ? clear_bhb_loop+0x40/0x90 [ 443.204465][T11745] ? clear_bhb_loop+0x40/0x90 [ 443.204486][T11745] asm_int80_emulation+0x1a/0x20 [ 443.204504][T11745] RIP: 0023:0xf71061ab [ 443.204520][T11745] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 443.204535][T11745] RSP: 002b:00000000f53bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 443.204552][T11745] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53bd5d0 [ 443.204565][T11745] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 443.204575][T11745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.204585][T11745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 443.204597][T11745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.204625][T11745] [ 443.467633][T11727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.674459][T11749] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 443.693661][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.703030][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.866025][ T5723] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 444.054605][ T5723] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 444.067906][ T5723] usb 2-1: config 0 has no interface number 0 [ 444.090209][ T5723] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.099593][T11757] FAULT_INJECTION: forcing a failure. [ 444.099593][T11757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.123030][T11757] CPU: 1 UID: 0 PID: 11757 Comm: syz.3.1753 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.123064][T11757] Tainted: [L]=SOFTLOCKUP [ 444.123068][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.123075][T11757] Call Trace: [ 444.123080][T11757] [ 444.123087][T11757] dump_stack_lvl+0xe8/0x150 [ 444.123107][T11757] should_fail_ex+0x40c/0x560 [ 444.123121][T11757] _copy_from_user+0x2d/0xb0 [ 444.123133][T11757] copy_uabi_to_xstate+0x4d3/0xa10 [ 444.123147][T11757] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 444.123161][T11757] ? __might_fault+0xaf/0x130 [ 444.123199][T11757] ? fpu__restore_sig+0xc25/0x1200 [ 444.123213][T11757] ? fpu__restore_sig+0xc25/0x1200 [ 444.123227][T11757] ? __local_bh_enable_ip+0xd0/0x130 [ 444.123236][T11757] ? x86_task_fpu+0x4c/0x90 [ 444.123249][T11757] fpu__restore_sig+0x1092/0x1200 [ 444.123264][T11757] ? fpu__restore_sig+0xc25/0x1200 [ 444.123279][T11757] ? __lock_acquire+0x683/0x2cd0 [ 444.123290][T11757] ? __pfx_fpu__restore_sig+0x10/0x10 [ 444.123317][T11757] ia32_restore_sigcontext+0x40c/0x560 [ 444.123329][T11757] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 444.123346][T11757] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.123363][T11757] __ia32_compat_sys_rt_sigreturn+0x1ad/0x270 [ 444.123374][T11757] ? __task_pid_nr_ns+0x28/0x470 [ 444.123387][T11757] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 444.123401][T11757] ? asm_int80_emulation+0x1a/0x20 [ 444.123414][T11757] do_int80_emulation+0x19a/0x550 [ 444.123425][T11757] ? trace_irq_disable+0x3b/0x140 [ 444.123441][T11757] ? asm_int80_emulation+0x1a/0x20 [ 444.123450][T11757] ? clear_bhb_loop+0x40/0x90 [ 444.123460][T11757] ? clear_bhb_loop+0x40/0x90 [ 444.123472][T11757] asm_int80_emulation+0x1a/0x20 [ 444.123482][T11757] RIP: 0023:0xf7f6706a [ 444.123493][T11757] Code: 03 c9 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 444.123502][T11757] RSP: 002b:00000000f542650c EFLAGS: 00000206 [ 444.123512][T11757] RAX: 0000000000000036 RBX: 0000000000000003 RCX: 0000000000005101 [ 444.123519][T11757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.123525][T11757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.123531][T11757] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 444.123537][T11757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.123551][T11757] [ 444.235962][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.387181][ T5723] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 444.405773][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.413883][ T5723] usb 2-1: Product: syz [ 444.418208][ T5723] usb 2-1: Manufacturer: syz [ 444.422846][ T5723] usb 2-1: SerialNumber: syz [ 444.431113][ T5723] usb 2-1: config 0 descriptor?? [ 444.455880][ T5723] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 444.592668][T11761] FAULT_INJECTION: forcing a failure. [ 444.592668][T11761] name failslab, interval 1, probability 0, space 0, times 0 [ 444.609812][T11761] CPU: 1 UID: 0 PID: 11761 Comm: syz.2.1755 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.609841][T11761] Tainted: [L]=SOFTLOCKUP [ 444.609848][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.609857][T11761] Call Trace: [ 444.609864][T11761] [ 444.609871][T11761] dump_stack_lvl+0xe8/0x150 [ 444.609895][T11761] should_fail_ex+0x40c/0x560 [ 444.609916][T11761] should_failslab+0xa8/0x100 [ 444.609944][T11761] __kmalloc_noprof+0xe8/0x750 [ 444.609966][T11761] ? kobject_get_path+0xc5/0x2f0 [ 444.610072][T11761] ? __kasan_kmalloc+0x93/0xb0 [ 444.610100][T11761] kobject_get_path+0xc5/0x2f0 [ 444.610115][T11761] ? kobject_uevent_env+0x289/0x9e0 [ 444.610140][T11761] kobject_uevent_env+0x29e/0x9e0 [ 444.610165][T11761] __kobject_del+0xd1/0x310 [ 444.610185][T11761] kobject_put+0x23a/0x550 [ 444.610209][T11761] net_rx_queue_update_kobjects+0x6bf/0x780 [ 444.610277][T11761] netdev_unregister_kobject+0xff/0x450 [ 444.610299][T11761] unregister_netdevice_many_notify+0x1df3/0x2370 [ 444.610358][T11761] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 444.610377][T11761] ? __mutex_lock+0x30f/0x1590 [ 444.610395][T11761] ? ima_file_free+0x16c/0x5d0 [ 444.610416][T11761] ? __pfx_ima_file_free+0x10/0x10 [ 444.610432][T11761] ? __asan_memset+0x22/0x50 [ 444.610453][T11761] ? __fsnotify_parent+0x267/0x620 [ 444.610488][T11761] unregister_netdevice_queue+0x2f5/0x340 [ 444.610518][T11761] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 444.610547][T11761] ppp_release+0x102/0x140 [ 444.610614][T11761] ? __pfx_ppp_release+0x10/0x10 [ 444.610635][T11761] __fput+0x418/0xa50 [ 444.610664][T11761] fput_close_sync+0x11f/0x240 [ 444.610688][T11761] ? __pfx_fput_close_sync+0x10/0x10 [ 444.610709][T11761] ? do_raw_spin_unlock+0xf5/0x210 [ 444.610740][T11761] __ia32_sys_close+0x7e/0x110 [ 444.610764][T11761] __do_fast_syscall_32+0x23e/0x6f0 [ 444.610784][T11761] ? do_fast_syscall_32+0x33/0x70 [ 444.610801][T11761] ? lockdep_hardirqs_on+0x7a/0x110 [ 444.610826][T11761] ? asm_int80_emulation+0x1a/0x20 [ 444.610844][T11761] ? do_int80_emulation+0x29f/0x550 [ 444.610866][T11761] do_fast_syscall_32+0x33/0x70 [ 444.610885][T11761] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.610907][T11761] RIP: 0023:0xf700f06c [ 444.610925][T11761] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 444.610940][T11761] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 444.610959][T11761] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 444.610971][T11761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.610981][T11761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.610991][T11761] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 444.611001][T11761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.611028][T11761] [ 445.045048][T11773] fuse: Bad value for 'rootmode' [ 445.200422][ T5723] usb 2-1: USB disconnect, device number 82 [ 445.218774][T11778] xt_CT: No such helper "snmp_trap" [ 445.237227][ T9062] hid_parser_main: 39 callbacks suppressed [ 445.237251][ T9062] hid-generic 0000:0000:0000.0013: unknown main item tag 0x7 [ 445.252434][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.298558][ T9062] hid-generic 0000:0000:0000.0013: ignoring exceeding usage max [ 445.321216][ T9062] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 445.335848][T11785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1759'. [ 445.348985][ T9062] hid-generic 0000:0000:0000.0013: unknown main item tag 0x3 [ 445.362903][ T9062] hid-generic 0000:0000:0000.0013: unknown main item tag 0x3 [ 445.386220][ T9062] hid-generic 0000:0000:0000.0013: unknown main item tag 0x3 [ 445.410207][ T9062] hid-generic 0000:0000:0000.0013: unknown main item tag 0x3 [ 445.420609][ T9062] hid-generic 0000:0000:0000.0013: unknown main item tag 0x3 [ 445.428695][ T9062] hid-generic 0000:0000:0000.0013: unknown main item tag 0x3 [ 445.436237][ T9062] hid-generic 0000:0000:0000.0013: unknown main item tag 0x3 [ 445.471069][ T9062] hid-generic 0000:0000:0000.0013: unknown main item tag 0x3 [ 445.489303][ T9062] hid-generic 0000:0000:0000.0013: item fetching failed at offset 41/43 [ 445.512718][ T9062] hid-generic 0000:0000:0000.0013: probe with driver hid-generic failed with error -22 [ 445.591695][T11794] FAULT_INJECTION: forcing a failure. [ 445.591695][T11794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.617056][T11794] CPU: 1 UID: 0 PID: 11794 Comm: syz.3.1765 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.617084][T11794] Tainted: [L]=SOFTLOCKUP [ 445.617091][T11794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 445.617100][T11794] Call Trace: [ 445.617108][T11794] [ 445.617115][T11794] dump_stack_lvl+0xe8/0x150 [ 445.617141][T11794] should_fail_ex+0x40c/0x560 [ 445.617164][T11794] _copy_from_user+0x2d/0xb0 [ 445.617185][T11794] get_compat_msghdr+0xb3/0x4b0 [ 445.617300][T11794] ? __pfx_get_compat_msghdr+0x10/0x10 [ 445.617369][T11794] ___sys_sendmsg+0x201/0x360 [ 445.617394][T11794] ? __lock_acquire+0x683/0x2cd0 [ 445.617416][T11794] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.617450][T11794] ? kstrtoull+0x12f/0x1d0 [ 445.617500][T11794] ? __fget_files+0x2a/0x420 [ 445.617521][T11794] ? __fget_files+0x3a2/0x420 [ 445.617551][T11794] __sys_sendmmsg+0x2e7/0x4e0 [ 445.617581][T11794] ? __pfx___sys_sendmmsg+0x10/0x10 [ 445.617632][T11794] ? fput+0xa0/0xd0 [ 445.617652][T11794] ? ksys_write+0x242/0x270 [ 445.617683][T11794] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 445.617704][T11794] __do_fast_syscall_32+0x23e/0x6f0 [ 445.617725][T11794] ? do_fast_syscall_32+0x33/0x70 [ 445.617742][T11794] ? lockdep_hardirqs_on+0x7a/0x110 [ 445.617767][T11794] ? asm_int80_emulation+0x1a/0x20 [ 445.617784][T11794] ? do_int80_emulation+0x29f/0x550 [ 445.617799][T11794] ? trace_irq_disable+0x3b/0x140 [ 445.617835][T11794] do_fast_syscall_32+0x33/0x70 [ 445.617853][T11794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.617873][T11794] RIP: 0023:0xf7f6706c [ 445.617889][T11794] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 445.617904][T11794] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 445.617923][T11794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002e40 [ 445.617935][T11794] RDX: 0000000000000001 RSI: 0000000020008840 RDI: 0000000000000000 [ 445.617947][T11794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.617958][T11794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 445.617968][T11794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.617993][T11794] [ 446.181976][T11808] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 446.198931][T11808] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 446.275951][ T9062] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 446.297266][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.345092][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1773'. [ 446.362780][T11815] veth1: entered promiscuous mode [ 446.368529][T11815] veth1: entered allmulticast mode [ 446.463956][ T9062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.490568][ T9062] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 446.518368][ T9062] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 446.524949][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1774'. [ 446.527721][ T9062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.544817][ T9062] usb 1-1: Product: syz [ 446.558233][ T9062] usb 1-1: Manufacturer: syz [ 446.562899][ T9062] usb 1-1: SerialNumber: syz [ 446.576372][ T9062] usb 1-1: config 0 descriptor?? [ 446.599673][ T5723] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 446.635513][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.647862][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.665044][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.673985][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.689558][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.698853][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.710353][T11820] syzkaller1: entered allmulticast mode [ 446.808865][T11827] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 4, id = 0 [ 446.840289][T11805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.851554][T11805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.027213][T11836] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 447.036982][T11836] binder: 11835:11836 ioctl c0046209 0 returned -22 [ 447.067162][ T5723] usb 1-1: USB disconnect, device number 72 [ 447.306169][ T5689] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 447.325998][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 447.412111][T11845] program syz.2.1785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.477339][ T5689] usb 2-1: Using ep0 maxpacket: 16 [ 447.500254][ T5689] usb 2-1: unable to get BOS descriptor or descriptor too short [ 447.513740][ T5689] usb 2-1: config 9 has an invalid interface number: 73 but max is 0 [ 447.532659][ T5689] usb 2-1: config 9 has no interface number 0 [ 447.548768][ T5689] usb 2-1: config 9 interface 73 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.565416][ T5689] usb 2-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=65.30 [ 447.578229][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.588692][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1789'. [ 447.597880][ T5689] usb 2-1: Product: syz [ 447.602121][ T5689] usb 2-1: Manufacturer: syz [ 447.607705][ T5689] usb 2-1: SerialNumber: syz [ 447.667379][ T24] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 447.826146][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 447.836345][ T5689] gspca_main: tv8532-2.14.0 probing 0545:808b [ 447.848255][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 447.862145][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.871723][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.880907][ T24] usb 5-1: Product: syz [ 447.885371][ T24] usb 5-1: Manufacturer: syz [ 447.890507][ T24] usb 5-1: SerialNumber: syz [ 447.900927][ T24] usb 5-1: config 0 descriptor?? [ 447.910055][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.920846][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 447.946680][ T5689] usb 2-1: USB disconnect, device number 83 [ 448.365965][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.514342][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 448.660944][T11872] input: syz0 as /devices/virtual/input/input104 [ 448.664833][T11873] input: syz0 as /devices/virtual/input/input105 [ 448.800838][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 448.809769][ T24] em28xx 5-1:0.0: board has no eeprom [ 448.896668][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 448.910009][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 448.931163][ T5689] em28xx 5-1:0.0: Binding DVB extension [ 448.952009][ T24] usb 5-1: USB disconnect, device number 109 [ 448.992710][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 449.055774][ T5689] em28xx 5-1:0.0: Registering input extension [ 449.063360][ T24] em28xx 5-1:0.0: Closing input extension [ 449.089563][ T24] em28xx 5-1:0.0: Freeing device [ 449.265942][T10751] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 449.406118][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 449.423597][T10751] usb 2-1: unable to get BOS descriptor or descriptor too short [ 449.444978][T10751] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.471194][T10751] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.473308][T10751] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 449.501622][T10751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.511549][T10751] usb 2-1: Product: syz [ 449.516280][T10751] usb 2-1: Manufacturer: syz [ 449.528304][T10751] usb 2-1: SerialNumber: syz [ 449.565740][T10751] usb 2-1: selecting invalid altsetting 1 [ 449.578312][T10751] usb 2-1: unit 6 not found! [ 449.755945][ T24] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 449.794267][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 449.794307][ T30] audit: type=1400 audit(1781377212.377:2006): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11895 comm="syz.2.1802" [ 449.896082][ T24] usb 5-1: device descriptor read/64, error -71 [ 449.985916][ T5689] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 450.136018][ T24] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 450.145952][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 450.170399][ T5689] usb 4-1: config index 0 descriptor too short (expected 65532, got 18) [ 450.187092][ T5689] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 450.195631][ T5689] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 450.219769][ T5689] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 450.240138][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.258202][ T5689] usb 4-1: Product: syz [ 450.268518][ T5689] usb 4-1: Manufacturer: syz [ 450.278312][ T5689] usb 4-1: SerialNumber: syz [ 450.308771][ T5689] r8152-cfgselector 4-1: Unknown version 0x0000 [ 450.315981][ T24] usb 5-1: device descriptor read/64, error -71 [ 450.328364][T11882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.338070][ T5689] r8152-cfgselector 4-1: config 0 descriptor?? [ 450.363584][T11882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.445883][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.446251][ T24] usb usb5-port1: attempt power cycle [ 450.561762][T11893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.588556][T11893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.657293][T11893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.677036][T11901] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1803'. [ 450.686934][T11893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.704685][T11893] syzkaller1: entered allmulticast mode [ 450.720255][ T5689] r8152-cfgselector 4-1: Unknown version 0x0000 [ 450.735731][ T5689] r8152-cfgselector 4-1: No union descriptors [ 450.763150][T11885] syz.0.1798: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 450.770378][ T5689] r8152-cfgselector 4-1: USB disconnect, device number 98 [ 450.806030][ T24] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 450.823012][T11885] CPU: 0 UID: 0 PID: 11885 Comm: syz.0.1798 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.823057][T11885] Tainted: [L]=SOFTLOCKUP [ 450.823066][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.823078][T11885] Call Trace: [ 450.823086][T11885] [ 450.823095][T11885] dump_stack_lvl+0xe8/0x150 [ 450.823126][T11885] warn_alloc+0x249/0x340 [ 450.823155][T11885] ? __pfx_stack_trace_save+0x10/0x10 [ 450.823191][T11885] ? __pfx_warn_alloc+0x10/0x10 [ 450.823222][T11885] ? __kasan_kmalloc+0x93/0xb0 [ 450.823248][T11885] ? __kmalloc_cache_noprof+0x318/0x660 [ 450.823272][T11885] ? xskq_create+0x56/0x170 [ 450.823411][T11885] ? xsk_init_queue+0x8a/0xe0 [ 450.823446][T11885] ? xsk_setsockopt+0x52a/0x960 [ 450.823468][T11885] ? do_sock_setsockopt+0x17c/0x1b0 [ 450.823494][T11885] ? __ia32_sys_setsockopt+0x13d/0x1b0 [ 450.823522][T11885] ? do_fast_syscall_32+0x33/0x70 [ 450.823542][T11885] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.823577][T11885] __vmalloc_node_range_noprof+0x12c/0x1730 [ 450.823629][T11885] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 450.823661][T11885] ? __kasan_kmalloc+0x93/0xb0 [ 450.823695][T11885] vmalloc_user_noprof+0xad/0xe0 [ 450.823722][T11885] ? xskq_create+0xbf/0x170 [ 450.823749][T11885] xskq_create+0xbf/0x170 [ 450.823777][T11885] xsk_init_queue+0x8a/0xe0 [ 450.823802][T11885] xsk_setsockopt+0x52a/0x960 [ 450.823829][T11885] ? __pfx_xsk_setsockopt+0x10/0x10 [ 450.823855][T11885] ? __pfx_aa_sk_perm+0x10/0x10 [ 450.823884][T11885] ? aa_sock_opt_perm+0xff/0x1a0 [ 450.823915][T11885] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 450.823944][T11885] ? __pfx_xsk_setsockopt+0x10/0x10 [ 450.823971][T11885] do_sock_setsockopt+0x17c/0x1b0 [ 450.824001][T11885] __ia32_sys_setsockopt+0x13d/0x1b0 [ 450.824039][T11885] __do_fast_syscall_32+0x23e/0x6f0 [ 450.824061][T11885] ? do_fast_syscall_32+0x33/0x70 [ 450.824081][T11885] ? lockdep_hardirqs_on+0x7a/0x110 [ 450.824109][T11885] ? irqentry_exit+0x10f/0x8e0 [ 450.824126][T11885] ? trace_irq_disable+0x3b/0x140 [ 450.824156][T11885] do_fast_syscall_32+0x33/0x70 [ 450.824176][T11885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.824199][T11885] RIP: 0023:0xf704f06c [ 450.824218][T11885] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 450.824236][T11885] RSP: 002b:00000000f541c50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 450.824256][T11885] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000000011b [ 450.824269][T11885] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000029 [ 450.824282][T11885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.824293][T11885] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 450.824305][T11885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.824333][T11885] [ 450.856559][ T24] usb 5-1: device descriptor read/8, error -71 [ 450.991250][T11885] Mem-Info: [ 451.157740][T11885] active_anon:9180 inactive_anon:1 isolated_anon:0 [ 451.157740][T11885] active_file:16697 inactive_file:40584 isolated_file:0 [ 451.157740][T11885] unevictable:768 dirty:353 writeback:0 [ 451.157740][T11885] slab_reclaimable:6789 slab_unreclaimable:117998 [ 451.157740][T11885] mapped:31800 shmem:4161 pagetables:1761 [ 451.157740][T11885] sec_pagetables:0 bounce:0 [ 451.157740][T11885] kernel_misc_reclaimable:0 [ 451.157740][T11885] free:1087406 free_pcp:11422 free_cma:0 [ 451.223815][T11885] Node 0 active_anon:36720kB inactive_anon:4kB active_file:66788kB inactive_file:162132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127200kB dirty:1412kB writeback:0kB shmem:15108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12728kB pagetables:6788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 451.263432][T11885] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 451.309182][T10751] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 451.332167][T11907] FAULT_INJECTION: forcing a failure. [ 451.332167][T11907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.353367][T11907] CPU: 0 UID: 0 PID: 11907 Comm: syz.2.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.353395][T11907] Tainted: [L]=SOFTLOCKUP [ 451.353402][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 451.353413][T11907] Call Trace: [ 451.353419][T11907] [ 451.353428][T11907] dump_stack_lvl+0xe8/0x150 [ 451.353454][T11907] should_fail_ex+0x40c/0x560 [ 451.353477][T11907] _copy_from_user+0x2d/0xb0 [ 451.353500][T11907] get_compat_msghdr+0xb3/0x4b0 [ 451.353519][T11907] ? _parse_integer_limit+0x1ae/0x1f0 [ 451.353544][T11907] ? __pfx_get_compat_msghdr+0x10/0x10 [ 451.353573][T11907] ? kstrtoull+0x12f/0x1d0 [ 451.353604][T11907] ___sys_sendmsg+0x201/0x360 [ 451.353629][T11907] ? __lock_acquire+0x683/0x2cd0 [ 451.353650][T11907] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.353676][T11907] ? get_pid_task+0x20/0x1f0 [ 451.353698][T11907] ? get_pid_task+0x20/0x1f0 [ 451.353715][T11907] ? get_pid_task+0x20/0x1f0 [ 451.353758][T11907] ? __fget_files+0x2a/0x420 [ 451.353781][T11907] ? __fget_files+0x3a2/0x420 [ 451.353811][T11907] __sys_sendmsg+0x183/0x260 [ 451.353839][T11907] ? __pfx___sys_sendmsg+0x10/0x10 [ 451.353883][T11907] __do_fast_syscall_32+0x23e/0x6f0 [ 451.353903][T11907] ? do_fast_syscall_32+0x33/0x70 [ 451.353921][T11907] ? lockdep_hardirqs_on+0x7a/0x110 [ 451.353945][T11907] ? asm_int80_emulation+0x1a/0x20 [ 451.353962][T11907] ? do_int80_emulation+0x29f/0x550 [ 451.353984][T11907] do_fast_syscall_32+0x33/0x70 [ 451.354003][T11907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 451.354032][T11907] RIP: 0023:0xf700f06c [ 451.354049][T11907] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 451.354064][T11907] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 451.354083][T11907] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 451.354096][T11907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.354107][T11907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.354121][T11907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 451.354132][T11907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.354158][T11907] [ 451.357883][T11885] Node 0 [ 451.391725][ T9062] usb 2-1: USB disconnect, device number 84 [ 451.415023][ T8732] udevd[8732]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.495877][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 451.497781][ T24] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 451.569907][T11885] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 451.661659][ T24] usb 5-1: device descriptor read/8, error -71 [ 451.661728][T11885] lowmem_reserve[]: 0 2493 2494 2494 2494 [ 451.673850][T11885] Node 0 DMA32 free:391744kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37320kB inactive_anon:4kB active_file:66788kB inactive_file:162132kB unevictable:1536kB writepending:1412kB zspages:0kB present:3129332kB managed:2553216kB mlocked:0kB bounce:0kB free_pcp:43708kB local_pcp:24208kB free_cma:0kB [ 451.707606][T11885] lowmem_reserve[]: 0 0 0 0 0 [ 451.712332][T11885] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:692kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 451.742141][T11885] lowmem_reserve[]: 0 0 0 0 0 [ 451.747536][T11885] Node 1 Normal free:3942772kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1240kB local_pcp:748kB free_cma:0kB [ 451.783203][ T24] usb usb5-port1: unable to enumerate USB device [ 451.783394][T11885] lowmem_reserve[]: 0 0 0 0 0 [ 451.794890][T11885] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 451.807993][T11885] Node 0 DMA32: 2862*4kB (UME) 1364*8kB (UME) 1131*16kB (UME) 428*32kB (UME) 291*64kB (UME) 242*128kB (UME) 87*256kB (UME) 29*512kB (UM) 16*1024kB (UM) 3*2048kB (UM) 56*4096kB (M) = 392776kB [ 451.827191][T11885] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 451.830253][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.839063][T11885] Node 1 Normal: 2*4kB (UM) 2*8kB (U) 5*16kB (U) 6*32kB (U) 0*64kB 1*128kB (U) 2*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 960*4096kB (UM) = 3942824kB [ 451.849789][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.863835][T11885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.881094][T11885] Node 0 hugepages_total=7 hugepages_free=7 hugepages_surp=4 hugepages_size=2048kB [ 451.890709][T11885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.900543][T11885] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 451.909883][T11885] 60955 total pagecache pages [ 451.914821][T11885] 1 pages in swap cache [ 451.919035][T11885] Free swap = 124992kB [ 451.923174][T11885] Total swap = 124996kB [ 451.927570][T11885] 2097051 pages RAM [ 451.931408][T11885] 0 pages HighMem/MovableOnly [ 451.936132][T11885] 426959 pages reserved [ 451.940418][T11885] 0 pages cma reserved [ 452.032472][T11912] fuse: Unknown parameter '0x0000000000000009' [ 452.518407][T11932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.518468][T11933] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1814'. [ 452.527985][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.809733][T11938] usb usb7: usbfs: process 11938 (syz.4.1816) did not claim interface 0 before use [ 452.893175][T11946] syzkaller0: entered promiscuous mode [ 452.899094][T11946] syzkaller0: entered allmulticast mode [ 453.098979][T11956] syzkaller0: entered promiscuous mode [ 453.104523][T11956] syzkaller0: entered allmulticast mode [ 453.128185][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 453.315983][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 453.325260][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 453.335908][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.344031][ T10] usb 1-1: Product: syz [ 453.349652][ T10] usb 1-1: Manufacturer: syz [ 453.354392][ T10] usb 1-1: SerialNumber: syz [ 453.363553][ T10] usb 1-1: config 0 descriptor?? [ 453.406175][ T5723] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 453.435933][ T808] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 453.545978][ T5723] usb 4-1: device descriptor read/64, error -71 [ 453.568132][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.581505][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 453.597807][ T808] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 453.616202][ T808] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 453.645902][ T808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 453.654969][ T808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 453.678439][ T808] usb 5-1: New USB device found, idVendor=7d65, idProduct=a415, bcdDevice= 0.40 [ 453.696184][ T808] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 453.726053][ T808] usb 5-1: Product: syz [ 453.733400][ T808] usb 5-1: Manufacturer: syz [ 453.765270][T11959] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 453.797937][ T808] cdc_wdm 5-1:1.0: skipping garbage [ 453.809021][ T5723] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 453.814795][ T808] cdc_wdm 5-1:1.0: skipping garbage [ 453.838419][ T808] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 453.870194][ T808] cdc_wdm 5-1:1.0: Unknown control protocol [ 453.966103][ T5723] usb 4-1: device descriptor read/64, error -71 [ 453.979337][T11967] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1828'. [ 454.074088][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 454.080732][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 454.087069][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 454.093684][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 454.096336][ T5723] usb usb4-port1: attempt power cycle [ 454.101974][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 454.111781][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 454.119039][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 454.125655][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 454.132297][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 454.138911][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 454.145640][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 454.152257][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 454.158659][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 454.165264][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 454.171606][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 454.178229][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 454.185383][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 454.204761][ T9062] usb 5-1: USB disconnect, device number 114 [ 454.436230][ T5723] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 454.457561][ T5723] usb 4-1: device descriptor read/8, error -71 [ 454.483621][T11976] fuse: Unknown parameter '0x0000000000000009' [ 454.500371][T11973] team0: entered allmulticast mode [ 454.505851][T11973] team_slave_0: entered allmulticast mode [ 454.512415][T11973] team_slave_1: entered allmulticast mode [ 454.522564][T11977] team0: left allmulticast mode [ 454.528907][T11977] team_slave_0: left allmulticast mode [ 454.534445][T11977] team_slave_1: left allmulticast mode [ 454.605959][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.705908][ T5723] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 454.726695][ T5723] usb 4-1: device descriptor read/8, error -71 [ 454.836342][ T5723] usb usb4-port1: unable to enumerate USB device [ 455.121654][T11984] input: syz0 as /devices/virtual/input/input107 [ 455.190851][T11985] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 455.203566][T11985] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 455.220683][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 455.236914][ T10] usb 1-1: USB disconnect, device number 73 [ 455.359841][T11987] FAULT_INJECTION: forcing a failure. [ 455.359841][T11987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.373005][T11987] CPU: 1 UID: 0 PID: 11987 Comm: syz.2.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.373034][T11987] Tainted: [L]=SOFTLOCKUP [ 455.373040][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.373051][T11987] Call Trace: [ 455.373062][T11987] [ 455.373070][T11987] dump_stack_lvl+0xe8/0x150 [ 455.373088][T11987] should_fail_ex+0x40c/0x560 [ 455.373102][T11987] _copy_from_user+0x2d/0xb0 [ 455.373115][T11987] snd_rawmidi_kernel_write1+0x3ad/0x640 [ 455.373253][T11987] snd_rawmidi_write+0x5b6/0xbc0 [ 455.373275][T11987] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 455.373289][T11987] ? __pfx_default_wake_function+0x10/0x10 [ 455.373301][T11987] ? apparmor_file_permission+0x1f4/0x300 [ 455.373315][T11987] ? bpf_lsm_file_permission+0x9/0x20 [ 455.373330][T11987] ? security_file_permission+0x75/0x260 [ 455.373342][T11987] ? rw_verify_area+0x203/0x4c0 [ 455.373358][T11987] vfs_writev+0x4bb/0x990 [ 455.373371][T11987] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 455.373386][T11987] ? __pfx_vfs_writev+0x10/0x10 [ 455.373406][T11987] ? __fget_files+0x2a/0x420 [ 455.373419][T11987] ? __fget_files+0x3a2/0x420 [ 455.373430][T11987] ? __fget_files+0x2a/0x420 [ 455.373445][T11987] do_writev+0x154/0x2e0 [ 455.373458][T11987] ? __pfx_do_writev+0x10/0x10 [ 455.373476][T11987] __do_fast_syscall_32+0x23e/0x6f0 [ 455.373488][T11987] ? do_fast_syscall_32+0x33/0x70 [ 455.373497][T11987] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.373511][T11987] ? asm_int80_emulation+0x1a/0x20 [ 455.373520][T11987] ? do_int80_emulation+0x29f/0x550 [ 455.373530][T11987] ? trace_irq_disable+0x3b/0x140 [ 455.373546][T11987] do_fast_syscall_32+0x33/0x70 [ 455.373556][T11987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.373568][T11987] RIP: 0023:0xf700f06c [ 455.373580][T11987] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 455.373589][T11987] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 455.373600][T11987] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000840 [ 455.373607][T11987] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.373614][T11987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.373620][T11987] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.373630][T11987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.373654][T11987] [ 455.646183][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.020208][T12002] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1840'. [ 456.486159][ T5723] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 456.648726][ T5723] usb 4-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 456.675145][ T5723] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.685876][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.715280][ T5723] usb 4-1: New USB device found, idVendor=0c45, idProduct=1023, bcdDevice=e6.fc [ 456.725094][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.743298][ T5723] usb 4-1: Product: syz [ 456.752530][ T5723] usb 4-1: Manufacturer: syz [ 456.765200][ T5723] usb 4-1: SerialNumber: syz [ 456.774909][T11994] vivid-000: kernel_thread() failed [ 456.784385][ T5723] usb 4-1: config 0 descriptor?? [ 456.958735][T12033] fuse: Unknown parameter '0x0000000000000009' [ 457.014364][ T808] usb 4-1: USB disconnect, device number 103 [ 457.272198][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1845'. [ 457.627009][T12047] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1846'. [ 457.727298][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.937516][T12051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1848'. [ 458.667248][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1849'. [ 458.766008][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.821731][T12053] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.829447][T12053] bridge0: port 1(1x9) entered disabled state [ 458.986172][T12053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.146386][ T5723] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 459.279336][T12063] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1851'. [ 459.316441][ T5723] usb 5-1: Using ep0 maxpacket: 8 [ 459.325012][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.345754][ T5723] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 459.375083][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.389727][ T5723] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 459.394737][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 459.398957][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 459.416647][ T5723] usb 5-1: Product: syz [ 459.420862][ T5723] usb 5-1: Manufacturer: syz [ 459.425474][ T5723] usb 5-1: SerialNumber: syz [ 459.435344][ T5723] usb 5-1: config 0 descriptor?? [ 459.505885][ T5723] rc_core: IR keymap rc-imon-rsc not found [ 459.512152][ T5723] Registered IR keymap rc-empty [ 459.529136][ T5723] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 459.543311][ T5723] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input108 [ 459.816167][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 459.936018][ T808] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 460.105887][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 460.127858][ T808] usb 4-1: config index 0 descriptor too short (expected 65532, got 18) [ 460.136322][ T808] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 460.144418][ T808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 460.180377][ T808] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 460.195854][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.215879][ T808] usb 4-1: Product: syz [ 460.220109][ T808] usb 4-1: Manufacturer: syz [ 460.224722][ T808] usb 4-1: SerialNumber: syz [ 460.253527][ T808] r8152-cfgselector 4-1: Unknown version 0x0000 [ 460.259911][ T808] r8152-cfgselector 4-1: config 0 descriptor?? [ 460.495414][T12069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.506804][T12073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'. [ 460.524695][T12069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.617267][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.649623][ T30] audit: type=1326 audit(1781377223.237:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.2.1857" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700f06c code=0x0 [ 460.676485][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.705745][T12069] syzkaller1: entered allmulticast mode [ 460.746407][ T808] r8152-cfgselector 4-1: Unknown version 0x0000 [ 460.787795][ T808] r8152-cfgselector 4-1: No union descriptors [ 460.802557][ T808] r8152-cfgselector 4-1: USB disconnect, device number 104 [ 460.846132][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.681832][T12100] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1862'. [ 461.705650][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.719437][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.777830][ T10] usb 5-1: USB disconnect, device number 115 [ 461.785317][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.831802][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.886072][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.281251][T12115] fuse: Unknown parameter '0x0000000000000009' [ 462.319105][ T5723] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 462.441183][T12116] veth1: left allmulticast mode [ 462.479214][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.501312][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.520784][ T5723] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 462.532369][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.550632][ T5723] usb 1-1: config 0 descriptor?? [ 462.609959][T12116] ip6tnl1: left allmulticast mode [ 462.649264][T12120] netlink: 'syz.1.1867': attribute type 5 has an invalid length. [ 462.662259][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'. [ 462.746217][T12122] fuse: blksize only supported for fuseblk [ 462.926132][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.971724][ T5723] hid_parser_main: 9 callbacks suppressed [ 462.971739][ T5723] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 462.991496][ T5723] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 462.999902][ T5723] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 463.008968][ T5723] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 463.016476][ T5723] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 463.023946][ T5723] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 463.032913][ T5723] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 463.051760][ T5723] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 463.077237][ T808] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 463.248011][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 463.281263][T12108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.293572][ T808] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 463.298044][T12108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.323639][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.347379][ T5723] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 463.363095][ T5723] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 463.371296][ T808] usb 2-1: config 0 descriptor?? [ 463.381345][ T5723] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -71 [ 463.383251][T12126] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 463.413955][ T5723] usb 1-1: USB disconnect, device number 74 [ 463.439314][T12144] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1875'. [ 463.553045][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.566811][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.583703][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.595304][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.620303][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.633127][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.966120][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.146550][T12151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.176905][T12151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.209192][T12151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.235699][T12151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.292234][T12152] dummy0: left promiscuous mode [ 464.428770][T12152] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 465.006180][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.160296][T12173] loop6: detected capacity change from 0 to 7 [ 465.172182][ C0] blk_print_req_error: 26 callbacks suppressed [ 465.172201][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.187684][ C0] buffer_io_error: 25 callbacks suppressed [ 465.187701][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.202485][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.211694][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.222159][T12174] FAULT_INJECTION: forcing a failure. [ 465.222159][T12174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 465.235967][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.245162][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.254546][T12174] CPU: 1 UID: 0 PID: 12174 Comm: syz.0.1883 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.254576][T12174] Tainted: [L]=SOFTLOCKUP [ 465.254582][T12174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.254593][T12174] Call Trace: [ 465.254600][T12174] [ 465.254608][T12174] dump_stack_lvl+0xe8/0x150 [ 465.254638][T12174] should_fail_ex+0x40c/0x560 [ 465.254661][T12174] prepare_alloc_pages+0x230/0x650 [ 465.254692][T12174] __alloc_frozen_pages_noprof+0x12f/0x380 [ 465.254719][T12174] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 465.254756][T12174] __alloc_pages_noprof+0x10/0x100 [ 465.254778][T12174] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 465.254800][T12174] ? __kmalloc_noprof+0x379/0x750 [ 465.254819][T12174] ? copy_splice_read+0x16f/0xaa0 [ 465.254837][T12174] ? __kmalloc_noprof+0x1b4/0x750 [ 465.254857][T12174] copy_splice_read+0x19f/0xaa0 [ 465.254882][T12174] ? __pfx_copy_splice_read+0x10/0x10 [ 465.254899][T12174] ? trace_kmalloc+0x2a/0xf0 [ 465.254916][T12174] ? look_up_lock_class+0x57/0x110 [ 465.254931][T12174] ? register_lock_class+0x31/0x2e0 [ 465.254954][T12174] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 465.254978][T12174] ? alloc_pipe_info+0x35d/0x4c0 [ 465.254998][T12174] ? __pfx_filemap_splice_read+0x10/0x10 [ 465.255046][T12174] splice_direct_to_actor+0x4b6/0xcb0 [ 465.255077][T12174] ? __pfx_direct_splice_actor+0x10/0x10 [ 465.255094][T12174] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 465.255118][T12174] do_splice_direct+0x195/0x290 [ 465.255137][T12174] ? __pfx_do_splice_direct+0x10/0x10 [ 465.255158][T12174] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 465.255177][T12174] ? bpf_lsm_file_permission+0x9/0x20 [ 465.255197][T12174] ? security_file_permission+0x75/0x260 [ 465.255216][T12174] ? rw_verify_area+0x203/0x4c0 [ 465.255237][T12174] do_sendfile+0x52e/0x7c0 [ 465.255259][T12174] ? __pfx_do_sendfile+0x10/0x10 [ 465.255273][T12174] ? ksys_write+0x242/0x270 [ 465.255295][T12174] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 465.255313][T12174] __do_fast_syscall_32+0x23e/0x6f0 [ 465.255327][T12174] ? do_fast_syscall_32+0x33/0x70 [ 465.255340][T12174] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.255360][T12174] ? asm_int80_emulation+0x1a/0x20 [ 465.255373][T12174] ? do_int80_emulation+0x29f/0x550 [ 465.255386][T12174] ? trace_irq_disable+0x3b/0x140 [ 465.255408][T12174] do_fast_syscall_32+0x33/0x70 [ 465.255422][T12174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.255438][T12174] RIP: 0023:0xf704f06c [ 465.255454][T12174] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 465.255466][T12174] RSP: 002b:00000000f541c50c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 465.255482][T12174] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 465.255492][T12174] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 0000000000000000 [ 465.255500][T12174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.255509][T12174] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 465.255517][T12174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.255542][T12174] [ 465.285183][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.365830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 465.370358][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.620630][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.629877][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.641394][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.650637][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.666267][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.675431][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.684881][T12173] ldm_validate_partition_table(): Disk read failed. [ 465.696302][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.705510][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.730898][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.740120][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.757172][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.766375][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.783032][T12173] Dev loop6: unable to read RDB block 0 [ 465.789919][T12173] loop6: unable to read partition table [ 465.800410][T12173] loop6: partition table beyond EOD, truncated [ 465.816951][T12173] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 465.837352][T12178] fuse: Unknown parameter 'fd0x0000000000000009' [ 465.922347][ T808] usbhid 2-1:0.0: can't add hid device: -71 [ 465.930813][T12182] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1886'. [ 465.944234][ T808] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 465.971528][ T808] usb 2-1: USB disconnect, device number 85 [ 466.046111][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.496134][ T808] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 466.606180][ T5723] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 466.667737][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.686756][ T808] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.709051][ T808] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 466.727317][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.737182][ T808] usb 1-1: Product: syz [ 466.741378][ T808] usb 1-1: Manufacturer: syz [ 466.744504][T12206] netlink: 'syz.2.1895': attribute type 5 has an invalid length. [ 466.746289][ T808] usb 1-1: SerialNumber: syz [ 466.759037][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 466.767985][ T808] usb 1-1: config 0 descriptor?? [ 466.775215][ T5723] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.786492][ T5723] usb 2-1: config 0 has no interfaces? [ 466.792139][T12206] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1895'. [ 466.814839][ T5723] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 466.827030][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.835226][ T5723] usb 2-1: Product: syz [ 466.840633][ T5723] usb 2-1: Manufacturer: syz [ 466.845679][ T5723] usb 2-1: SerialNumber: syz [ 466.854149][ T5723] usb 2-1: config 0 descriptor?? [ 466.982932][T12195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.997792][T12195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.096152][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 467.157616][T12215] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1898'. [ 467.204987][T12198] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 467.235259][ T5723] usb 1-1: USB disconnect, device number 75 [ 467.284010][ T808] usb 2-1: USB disconnect, device number 86 [ 467.315092][T12220] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 467.373033][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 467.686517][T12229] batadv1: entered promiscuous mode [ 467.697367][T12229] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 467.708461][T12233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.072580][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1904'. [ 468.077262][T12248] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 468.136026][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 468.216210][ T9062] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 468.348314][ T9062] usb 1-1: device descriptor read/64, error -71 [ 468.400698][T12251] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 468.616658][ T9062] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 468.675890][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 468.756106][ T9062] usb 1-1: device descriptor read/64, error -71 [ 468.838462][ T10] usb 2-1: config 0 has no interfaces? [ 468.846478][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 468.855694][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.871158][ T10] usb 2-1: config 0 descriptor?? [ 468.882158][ T9062] usb usb1-port1: attempt power cycle [ 468.929442][T12264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.953753][T12264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.093222][ T10] usb 2-1: USB disconnect, device number 87 [ 469.147128][ T24] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 469.176039][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 469.245984][ T9062] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 469.265888][ T808] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 469.266590][ T9062] usb 1-1: device descriptor read/8, error -71 [ 469.297634][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 469.305864][ T24] usb 5-1: config 0 has no interface number 0 [ 469.312009][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 469.321401][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.333147][ T24] usb 5-1: config 0 descriptor?? [ 469.347021][ T24] usb 5-1: selecting invalid altsetting 1 [ 469.352892][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 469.359613][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 469.404728][ T24] DVB: Unable to find symbol ves1820_attach() [ 469.418257][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.429103][ T808] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 469.442227][ T808] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 469.453060][ T24] DVB: Unable to find symbol stv0297_attach() [ 469.459225][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.467481][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 469.475538][ T808] usb 4-1: Product: syz [ 469.481886][ T808] usb 4-1: Manufacturer: syz [ 469.486963][ T808] usb 4-1: SerialNumber: syz [ 469.493576][ T808] usb 4-1: config 0 descriptor?? [ 469.536516][ T9062] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 469.557992][ T9062] usb 1-1: device descriptor read/8, error -71 [ 469.676352][ T9062] usb usb1-port1: unable to enumerate USB device [ 469.705700][T12269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.726612][T12269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.922868][ T10] usb 4-1: USB disconnect, device number 105 [ 470.216047][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.236141][ T10] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 471.246035][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.359628][T12307] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 471.406244][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 471.413737][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.434054][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.444679][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 471.454074][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.468609][ T10] usb 1-1: config 0 descriptor?? [ 471.477668][ T10] hub 1-1:0.0: USB hub found [ 471.592331][T12315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1933'. [ 471.609277][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'. [ 471.615917][ T24] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 471.684395][ T10] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 471.778751][ T24] usb 4-1: config 0 has no interfaces? [ 471.790451][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 471.806941][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.822270][ T24] usb 4-1: config 0 descriptor?? [ 471.853989][ T24] usb 5-1: USB disconnect, device number 116 [ 471.920623][ T10] hid-generic 0003:046D:C31C.0015: item fetching failed at offset 0/1 [ 471.963799][ T10] hid-generic 0003:046D:C31C.0015: probe with driver hid-generic failed with error -22 [ 472.012344][T12317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.048792][T12317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.074989][T12317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.095158][T12317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.134275][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.144965][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.160480][T12298] syz_tun: entered allmulticast mode [ 472.177600][T12297] syz_tun: left allmulticast mode [ 472.230121][T12322] bond2: option lacp_rate: invalid value (4) [ 472.239416][T12322] bond2 (unregistering): Released all slaves [ 472.286154][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.294222][ T24] usb 1-1: USB disconnect, device number 80 [ 473.326160][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.406513][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 473.587632][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.601579][ T10] usb 1-1: config 0 has no interfaces? [ 473.610069][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 473.619641][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.627938][ T10] usb 1-1: Product: syz [ 473.632239][ T10] usb 1-1: Manufacturer: syz [ 473.637057][ T10] usb 1-1: SerialNumber: syz [ 473.644009][ T10] usb 1-1: config 0 descriptor?? [ 473.815942][ T9062] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 473.877660][T12347] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 473.904185][ T24] usb 1-1: USB disconnect, device number 81 [ 473.976024][ T9062] usb 2-1: Using ep0 maxpacket: 8 [ 473.983083][ T9062] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.993695][ T9062] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 474.005571][ T9062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.019475][ T9062] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 474.028970][ T9062] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 474.037133][ T9062] usb 2-1: Product: syz [ 474.041348][ T9062] usb 2-1: Manufacturer: syz [ 474.046298][ T9062] usb 2-1: SerialNumber: syz [ 474.053302][ T9062] usb 2-1: config 0 descriptor?? [ 474.118718][ T9062] rc_core: IR keymap rc-imon-rsc not found [ 474.124819][ T9062] Registered IR keymap rc-empty [ 474.131030][ T9062] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 474.142485][ T9062] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input110 [ 474.366215][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.407417][T12365] netlink: 'syz.4.1946': attribute type 3 has an invalid length. [ 474.408455][ T10] usb 4-1: USB disconnect, device number 106 [ 474.955934][ T24] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 474.955997][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 475.123604][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.139725][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 475.144543][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 475.157835][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 475.167050][ T10] usb 4-1: config 0 has no interface number 0 [ 475.173847][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 167, changing to 11 [ 475.186396][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 475.186763][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 475.196878][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 475.202934][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.219881][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.220119][ T24] usb 1-1: Product: syz [ 475.228509][ T10] usb 4-1: Product: syz [ 475.233593][ T24] usb 1-1: Manufacturer: syz [ 475.238003][ T10] usb 4-1: Manufacturer: syz [ 475.241807][ T24] usb 1-1: SerialNumber: syz [ 475.250085][ T10] usb 4-1: SerialNumber: syz [ 475.257442][ T24] usb 1-1: config 0 descriptor?? [ 475.271179][ T10] usb 4-1: config 0 descriptor?? [ 475.416091][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 475.487075][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.496385][ T10] appletouch 4-1:0.85: Failed to read mode from device. [ 475.496502][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.512818][ T10] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 475.708366][ T5723] usb 1-1: USB disconnect, device number 82 [ 475.718036][ T10] usb 4-1: USB disconnect, device number 107 [ 476.318181][T12398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.426037][ T24] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 476.446034][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.485088][ T808] usb 2-1: USB disconnect, device number 88 [ 476.652152][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.686412][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.716482][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 476.726493][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 476.734721][ T24] usb 1-1: SerialNumber: syz [ 477.486177][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.532475][ T24] usb 1-1: 0:2 : does not exist [ 477.626266][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 477.700231][ T24] usb 1-1: USB disconnect, device number 83 [ 477.792960][ T8732] udevd[8732]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.811221][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 477.822176][ T10] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 477.837967][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.853848][ T10] usb 4-1: Product: syz [ 477.858616][ T10] usb 4-1: Manufacturer: syz [ 477.863332][ T10] usb 4-1: SerialNumber: syz [ 477.878853][ T10] usb 4-1: config 0 descriptor?? [ 477.900859][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 477.926001][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 477.935604][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 477.959133][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 477.976086][ T808] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 477.977488][ T10] usb 4-1: media controller created [ 478.005650][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.129619][T12432] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1970'. [ 478.147307][ T808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.166399][ T808] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 478.188091][ T808] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 478.203600][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.224632][ T808] usb 2-1: Product: syz [ 478.234787][ T808] usb 2-1: Manufacturer: syz [ 478.244948][ T808] usb 2-1: SerialNumber: syz [ 478.264746][ T808] usb 2-1: config 0 descriptor?? [ 478.338691][T12432] kvm: pic: non byte read [ 478.346889][ T24] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 478.481628][T12421] dvb-usb: bulk message failed: -22 (4/0) [ 478.488861][T12421] cxusb: i2c read failed [ 478.502332][T12421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.518698][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.519414][T12421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.537572][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.558796][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.573872][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.612452][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.635692][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.663505][ T24] usb 5-1: config 0 descriptor?? [ 478.855083][ T29] usb 2-1: USB disconnect, device number 89 [ 478.965419][ T24] plantronics 0003:047F:FFFF.0016: collection stack underflow [ 478.984659][ T24] plantronics 0003:047F:FFFF.0016: item 0 4 0 12 parsing failed [ 479.002712][ T24] plantronics 0003:047F:FFFF.0016: parse failed [ 479.026630][ T24] plantronics 0003:047F:FFFF.0016: probe with driver plantronics failed with error -22 [ 479.090517][ T24] usb 5-1: USB disconnect, device number 117 [ 479.324690][T12455] ------------[ cut here ]------------ [ 479.330580][T12455] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 479.330614][T12455] WARNING: fs/exec.c:119 at path_noexec+0x1b0/0x200, CPU#1: syz.2.1975/12455 [ 479.350699][T12455] Modules linked in: [ 479.354950][T12455] CPU: 1 UID: 0 PID: 12455 Comm: syz.2.1975 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.367504][T12455] Tainted: [L]=SOFTLOCKUP [ 479.371836][T12455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.382248][T12455] RIP: 0010:path_noexec+0x1b0/0x200 [ 479.387596][T12455] Code: 31 ff 48 89 de e8 30 78 81 ff 48 89 d8 d1 e8 eb 07 e8 44 73 81 ff b0 01 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 31 73 81 ff 90 <0f> 0b 90 e9 47 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a5 [ 479.407381][T12455] RSP: 0018:ffffc9001032fbb8 EFLAGS: 00010287 [ 479.415135][T12455] RAX: ffffffff8243ccff RBX: ffff88802986a780 RCX: 0000000000080000 [ 479.423176][T12455] RDX: ffffc9000642a000 RSI: 000000000000006e RDI: 000000000000006f [ 479.431475][T12455] RBP: 0000000000080000 R08: ffff888028430000 R09: 0000000000000003 [ 479.439535][T12455] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 479.447543][T12455] R13: 1ffff92002065f8c R14: 0000000000000000 R15: dffffc0000000000 [ 479.455532][T12455] FS: 0000000000000000(0000) GS:ffff8881253b9000(0063) knlGS:00000000f53fdb40 [ 479.464538][T12455] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 479.471188][T12455] CR2: 000000000c2d1ae0 CR3: 000000009bc36000 CR4: 00000000003526f0 [ 479.479192][T12455] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 479.487695][T12455] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 479.495684][T12455] Call Trace: [ 479.499127][T12455] [ 479.502067][T12455] do_mmap+0xa34/0x10c0 [ 479.506282][T12455] ? __pfx_do_mmap+0x10/0x10 [ 479.510869][T12455] ? down_write_killable+0x180/0x240 [ 479.516190][T12455] ? __pfx_down_write_killable+0x10/0x10 [ 479.521832][T12455] ? apparmor_mmap_file+0x2da/0x3e0 [ 479.527106][T12455] vm_mmap_pgoff+0x272/0x4e0 [ 479.531706][T12455] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 479.536902][T12455] ? __fget_files+0x2a/0x420 [ 479.541501][T12455] ? __fget_files+0x2a/0x420 [ 479.546137][T12455] ? __fget_files+0x2a/0x420 [ 479.550732][T12455] ksys_mmap_pgoff+0x4dc/0x760 [ 479.555505][T12455] __do_fast_syscall_32+0x23e/0x6f0 [ 479.560838][T12455] ? do_fast_syscall_32+0x33/0x70 [ 479.565933][T12455] ? lockdep_hardirqs_on+0x7a/0x110 [ 479.566276][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 479.571148][T12455] ? asm_int80_emulation+0x1a/0x20 [ 479.578080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 479.583145][T12455] ? do_int80_emulation+0x29f/0x550 [ 479.596671][T12455] ? trace_irq_disable+0x3b/0x140 [ 479.601718][T12455] do_fast_syscall_32+0x33/0x70 [ 479.606606][T12455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.612954][T12455] RIP: 0023:0xf700f06c [ 479.617060][T12455] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 479.636736][T12455] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 479.645172][T12455] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000003000 [ 479.645836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 479.653448][T12455] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000000000005 [ 479.669382][T12455] RBP: 00000000fffffff6 R08: 0000000000000000 R09: 0000000000000000 [ 479.677409][T12455] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 479.685385][T12455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.693446][T12455] [ 479.696536][T12455] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 479.703821][T12455] CPU: 1 UID: 0 PID: 12455 Comm: syz.2.1975 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.714747][T12455] Tainted: [L]=SOFTLOCKUP [ 479.719082][T12455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.729137][T12455] Call Trace: [ 479.732411][T12455] [ 479.735332][T12455] vpanic+0x56c/0xa60 [ 479.739352][T12455] ? __pfx__printk+0x10/0x10 [ 479.743957][T12455] ? __pfx_vpanic+0x10/0x10 [ 479.748467][T12455] ? is_bpf_text_address+0x292/0x2b0 [ 479.753739][T12455] ? is_bpf_text_address+0x26/0x2b0 [ 479.758935][T12455] panic+0xc5/0xd0 [ 479.762694][T12455] ? __pfx_panic+0x10/0x10 [ 479.767137][T12455] __warn+0x315/0x4c0 [ 479.771120][T12455] ? path_noexec+0x1b0/0x200 [ 479.775721][T12455] ? path_noexec+0x1b0/0x200 [ 479.780333][T12455] __report_bug+0x28e/0x530 [ 479.784985][T12455] ? path_noexec+0x1b0/0x200 [ 479.789592][T12455] ? __pfx___report_bug+0x10/0x10 [ 479.794630][T12455] ? futex_unqueue+0x22/0x240 [ 479.799343][T12455] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 479.805602][T12455] ? path_noexec+0x1b0/0x200 [ 479.810219][T12455] report_bug+0x16a/0x220 [ 479.814573][T12455] ? path_noexec+0x1b0/0x200 [ 479.819162][T12455] ? path_noexec+0x1b2/0x200 [ 479.823751][T12455] handle_bug+0x9c/0x200 [ 479.828003][T12455] exc_invalid_op+0x1a/0x50 [ 479.832518][T12455] asm_exc_invalid_op+0x1a/0x20 [ 479.837360][T12455] RIP: 0010:path_noexec+0x1b0/0x200 [ 479.842560][T12455] Code: 31 ff 48 89 de e8 30 78 81 ff 48 89 d8 d1 e8 eb 07 e8 44 73 81 ff b0 01 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 31 73 81 ff 90 <0f> 0b 90 e9 47 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a5 [ 479.862171][T12455] RSP: 0018:ffffc9001032fbb8 EFLAGS: 00010287 [ 479.868260][T12455] RAX: ffffffff8243ccff RBX: ffff88802986a780 RCX: 0000000000080000 [ 479.876257][T12455] RDX: ffffc9000642a000 RSI: 000000000000006e RDI: 000000000000006f [ 479.884220][T12455] RBP: 0000000000080000 R08: ffff888028430000 R09: 0000000000000003 [ 479.892197][T12455] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 479.900178][T12455] R13: 1ffff92002065f8c R14: 0000000000000000 R15: dffffc0000000000 [ 479.908164][T12455] ? path_noexec+0x1af/0x200 [ 479.912755][T12455] ? path_noexec+0x1af/0x200 [ 479.917346][T12455] do_mmap+0xa34/0x10c0 [ 479.921503][T12455] ? __pfx_do_mmap+0x10/0x10 [ 479.926084][T12455] ? down_write_killable+0x180/0x240 [ 479.931367][T12455] ? __pfx_down_write_killable+0x10/0x10 [ 479.937001][T12455] ? apparmor_mmap_file+0x2da/0x3e0 [ 479.942194][T12455] vm_mmap_pgoff+0x272/0x4e0 [ 479.946794][T12455] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 479.951911][T12455] ? __fget_files+0x2a/0x420 [ 479.956503][T12455] ? __fget_files+0x2a/0x420 [ 479.961107][T12455] ? __fget_files+0x2a/0x420 [ 479.965706][T12455] ksys_mmap_pgoff+0x4dc/0x760 [ 479.970477][T12455] __do_fast_syscall_32+0x23e/0x6f0 [ 479.975677][T12455] ? do_fast_syscall_32+0x33/0x70 [ 479.980704][T12455] ? lockdep_hardirqs_on+0x7a/0x110 [ 479.985912][T12455] ? asm_int80_emulation+0x1a/0x20 [ 479.991016][T12455] ? do_int80_emulation+0x29f/0x550 [ 479.996226][T12455] ? trace_irq_disable+0x3b/0x140 [ 480.001273][T12455] do_fast_syscall_32+0x33/0x70 [ 480.006133][T12455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 480.012466][T12455] RIP: 0023:0xf700f06c [ 480.016550][T12455] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 480.036151][T12455] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 480.044581][T12455] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000003000 [ 480.052566][T12455] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000000000005 [ 480.060553][T12455] RBP: 00000000fffffff6 R08: 0000000000000000 R09: 0000000000000000 [ 480.068536][T12455] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 480.077195][T12455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.085593][T12455] [ 480.089429][T12455] Kernel Offset: disabled [ 480.094571][T12455] Rebooting in 86400 seconds..